Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/111187?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/111187?format=api", "vulnerability_id": "VCID-47pq-dk4d-1fhx", "summary": "TYPO3 Sensitive Information Disclosure via escapeStrForLike method\nThe escapeStrForLike method in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 does not properly escape input when the MySQL database is set to sql_mode NO_BACKSLASH_ESCAPES, which allows remote attackers to obtain sensitive information via wildcard characters in a LIKE query.", "aliases": [ { "alias": "CVE-2010-5104" }, { "alias": "GHSA-xgc2-q928-27wv" } ], "fixed_packages": [], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/61750?format=api", "purl": "pkg:composer/typo3/cms-core@4.2.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47pq-dk4d-1fhx" }, { "vulnerability": "VCID-h1jn-6xyy-vfga" }, { "vulnerability": "VCID-zpyt-j4jd-8ufk" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@4.2.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/61466?format=api", "purl": "pkg:composer/typo3/cms-core@4.3.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47pq-dk4d-1fhx" }, { "vulnerability": "VCID-zpqz-822s-s3gp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@4.3.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/61467?format=api", "purl": "pkg:composer/typo3/cms-core@4.4.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-47pq-dk4d-1fhx" }, { "vulnerability": "VCID-zpqz-822s-s3gp" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@4.4.0" } ], "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2010-5104", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00765", "scoring_system": "epss", "scoring_elements": "0.73838", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00765", "scoring_system": "epss", "scoring_elements": "0.73801", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2010-5104" }, { "reference_url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64185", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64185" }, { "reference_url": "https://github.com/TYPO3-CMS/core", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3-CMS/core" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/9eb4be4ccf10e6959699b9cce375d48697f06cba", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3/commit/9eb4be4ccf10e6959699b9cce375d48697f06cba" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/e8c32474a5571336681243465f42090cf056054f", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3/commit/e8c32474a5571336681243465f42090cf056054f" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/fcabd2fc2aa557c94805f7505277185c4abb68ab", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3/commit/fcabd2fc2aa557c94805f7505277185c4abb68ab" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2010-5104", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-5104" }, { "reference_url": "https://web.archive.org/web/20101219052359/http://secunia.com/advisories/35770", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20101219052359/http://secunia.com/advisories/35770" }, { "reference_url": "https://web.archive.org/web/20111025222220/http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-022", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20111025222220/http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-022" }, { "reference_url": "https://web.archive.org/web/20111025222220/http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-022/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://web.archive.org/web/20111025222220/http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-022/" }, { "reference_url": "https://web.archive.org/web/20111223211753/http://www.securityfocus.com/bid/45470", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20111223211753/http://www.securityfocus.com/bid/45470" }, { "reference_url": "http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-022", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-022" }, { "reference_url": "http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-022/", "reference_id": "", "reference_type": "", "scores": [], "url": "http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-022/" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2011/01/13/2", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2011/01/13/2" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2012/05/10/7", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2012/05/10/7" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2012/05/11/3", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2012/05/11/3" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2012/05/12/5", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2012/05/12/5" }, { "reference_url": "https://github.com/advisories/GHSA-xgc2-q928-27wv", "reference_id": "GHSA-xgc2-q928-27wv", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-xgc2-q928-27wv" } ], "weaknesses": [ { "cwe_id": 200, "name": "Exposure of Sensitive Information to an Unauthorized Actor", "description": "The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information." }, { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." } ], "exploits": [], "severity_range_score": "4.0 - 6.9", "exploitability": "0.5", "weighted_severity": "6.2", "risk_score": 3.1, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-47pq-dk4d-1fhx" }