CVE-2011-3583

2019-11-2523:21:26

redhat

www.cve.org

9.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

65.1%

JSON

It was found that Typo3 Core versions 4.5.0 - 4.5.5 uses prepared statements that, if the parameter values are not properly replaced, could lead to a SQL Injection vulnerability. This issue can only be exploited if two or more parameters are bound to the query and at least two come from user input.

CNA Affected

[
  {
    "product": "TYPO3 Core",
    "vendor": "TYPO3 Core",
    "versions": [
      {
        "status": "affected",
        "version": "4.5.0 - 4.5.5"
      }
    ]
  }
]