CVE-2010-2131

HIGH 7.5CVE-2010-2131 · Published 02/06/2010 · updated 16/06/2026

In short

CVE-2010-2131 is a HIGH (CVSS 7.5) vulnerability affecting cal (mario matzulla).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 77.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cal mario_matzulla	`= 0.10.0= 0.11.0= 0.12.0= 0.12.1= 0.13.0= 0.13.1= 0.14.0= 0.14.1= 0.15.0= 0.15.1= 0.15.2= 0.15.3= 0.15.4= 0.15.5= 0.16.0= 0.16.1= 0.16.2= 0.16.3= 0.16.4= 0.16.5= 0.16.6= 0.17.0= 0.17.1= 0.17.2= 0.17.3= 0.9.0= 1.0.0= 1.1.0= 1.2.0= 1.2.1= 1.3.0≤ 1.3.1`	No fix yet

Description

SQL injection vulnerability in the Calendar Base (cal) extension before 1.3.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via iCalendar data.

References

osvdb.org/62668
secunia.com/advisories/38745 · Vendor Advisory
typo3.org/extensions/repository/view/cal/1.3.2 · Patch
typo3.org/teams/security/security-bulletins/typo3-sa-2010-005 · Patch
securityfocus.com/bid/38493

More vulnerabilities in cal

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free