Lucene search

[email protected]CVE-2014-6241

HistorySep 11, 2014 - 2:16 p.m.

CVE-2014-6241

2014-09-1114:16:00

CWE-89

[email protected]

web.nvd.nist.gov

cve-2014-6241

sql injection

typo3

wt_directory

vulnerability

remote attack

nvd

8.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

70.9%

JSON

SQL injection vulnerability in the wt_directory extension before 1.4.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CPENameOperatorVersion
wt_directory_project:wt_directorywt directory project wt directoryle1.4.0

CPE	Name	Operator	Version
wt_directory_project:wt_directory	wt directory project wt directory	le	1.4.0

References

secunia.com/advisories/60867

typo3.org/extensions/repository/view/wt_directory

typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-010

www.securityfocus.com/bid/69568

exchange.xforce.ibmcloud.com/vulnerabilities/95713

8.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

70.9%

JSON

Related for CVE-2014-6241

prion1 cvelist1 typo31