Lucene search

MitreCVE-2008-6696

HistoryApr 10, 2009 - 10:00 p.m.

CVE-2008-6696

2009-04-1022:00:00

CWE-89

mitre

web.nvd.nist.gov

cve-2008-6696

sql injection

fussballtippspiel

toto

typo3

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.7

Confidence

Low

EPSS

0.002

Percentile

65.0%

JSON

SQL injection vulnerability in Fussballtippspiel (toto) 0.1.1 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

Affected configurations

Nvd

Node

typo3typo3

AND

manu_oehlertotoRange≤0.1.1

manu_oehlertotoMatch0.1.0

VendorProductVersionCPE
typo3typo3*cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*
manu_oehlertoto*cpe:2.3:a:manu_oehler:toto:*:*:*:*:*:*:*:*
manu_oehlertoto0.1.0cpe:2.3:a:manu_oehler:toto:0.1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
typo3	typo3	*	cpe:2.3:a:typo3:typo3::::::::
manu_oehler	toto	*	cpe:2.3:a:manu_oehler:toto::::::::
manu_oehler	toto	0.1.0	cpe:2.3:a:manu_oehler:toto:0.1.0:::::::*

References

osvdb.org/46394

typo3.org/extensions/repository/view/toto/0.1.2/

typo3.org/teams/security/security-bulletins/typo3-20080619-1/

www.securityfocus.com/bid/29824

exchange.xforce.ibmcloud.com/vulnerabilities/43212

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.7

Confidence

Low

EPSS

0.002

Percentile

65.0%

JSON

Related for CVE-2008-6696