Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2013-4745: myquizpoll extension can let attackers run database commands
CVE-2013-4745 · published 13 years ago
Summary
The My Quiz and Poll (myquizpoll) add‑on for TYPO3 versions earlier than 2.0.6 lets a remote user send specially crafted data that is treated as a database query. This could let an attacker view, modify, or delete information stored in your site’s database. Update the extension to version 2.0.6 or later, or remove the add‑on if you do not need it.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| kurt_gusbeth | myquizpoll |
<= 1.4.0 0.1.1 0.1.2 0.1.3 0.1.4 0.1.5 0.1.6 0.1.7 0.2.0 0.2.1 0.2.2 0.3.0 6 more version ranges
cpe:2.3:a:kurt_gusbeth:myquizpoll:*:*:*:*:*:*:*:* |
Original advisory text
SQL injection vulnerability in the My quiz and poll (myquizpoll) extension before 2.0.6 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
SQL injection vulnerability in the My quiz and poll (myquizpoll) extension before 2.0.6 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Severity
7.5
High
Type
CWE-89SQL Injection
Timeline
Published1 Jul 2013
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2013-4745 · NVD
Track software like this
Free during beta