Lucene search
HistoryJun 27, 2013 - 8:55 p.m.
CVE-2012-6577
cve-2012-6577
sql injection
formhandler extension
typo3
nvd
security vulnerability
6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
8.2 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
49.6%
SQL injection vulnerability in the Formhandler extension before 1.4.1 for TYPO3 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors.
Affected configurations
Node
typoheadsformhandlerRange≤1.4.0
ORtypoheadsformhandlerMatch0.9.3
ORtypoheadsformhandlerMatch0.9.4
ORtypoheadsformhandlerMatch0.9.5
ORtypoheadsformhandlerMatch0.9.6
ORtypoheadsformhandlerMatch0.9.7
ORtypoheadsformhandlerMatch0.9.8
ORtypoheadsformhandlerMatch0.9.9
ORtypoheadsformhandlerMatch0.9.10
ORtypoheadsformhandlerMatch0.9.11
ORtypoheadsformhandlerMatch0.9.12
ORtypoheadsformhandlerMatch0.9.13
ORtypoheadsformhandlerMatch0.9.14
ORtypoheadsformhandlerMatch0.9.15
ORtypoheadsformhandlerMatch0.9.16
ORtypoheadsformhandlerMatch1.0.0
ORtypoheadsformhandlerMatch1.1.0
ORtypoheadsformhandlerMatch1.2.0
ORtypoheadsformhandlerMatch1.3.0
typo3typo3Match-
Related
cvelist
cvelist
CVE-2012-6577
2013-06-27 20:00:00
nvd
nvd
CVE-2012-6577
2013-06-27 20:55:01
prion
prion
Sql injection
2013-06-27 20:55:00
6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
8.2 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
49.6%
Related for CVE-2012-6577