Sql injection

2009-12-0217:30:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

48.5%

JSON

SQL injection vulnerability in the Calendar Base (cal) extension before 1.2.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CPENameOperatorVersion
calle1.2.0
caleq0.9.0
caleq0.10.0
caleq0.11.0
caleq0.12.0
caleq0.12.1
caleq0.13.0
caleq0.13.1
caleq0.14.0
caleq0.14.1

Name	Operator	Version
cal	le	1.2.0
cal	eq	0.9.0
cal	eq	0.10.0
cal	eq	0.11.0
cal	eq	0.12.0
cal	eq	0.12.1
cal	eq	0.13.0
cal	eq	0.13.1
cal	eq	0.14.0
cal	eq	0.14.1

Rows per page:

1-10 of 291

References

secunia.com/advisories/37549

typo3.org/extensions/repository/view/cal/1.2.1/

typo3.org/teams/security/security-bulletins/typo3-sa-2009-019/

www.securityfocus.com/bid/37164