Sql injection

2010-01-1519:30:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

51.7%

JSON

SQL injection vulnerability in the init function in MK-AnydropdownMenu (mk_anydropdownmenu) extension 0.3.28 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CPENameOperatorVersion
mk_anydropdownmenule0.3.28
mk_anydropdownmenueq0.3.10
mk_anydropdownmenueq0.3.12
mk_anydropdownmenueq0.3.13
mk_anydropdownmenueq0.3.23
mk_anydropdownmenueq0.3.25
mk_anydropdownmenueq0.3.26
mk_anydropdownmenueq0.3.27

Name	Operator	Version
mk_anydropdownmenu	le	0.3.28
mk_anydropdownmenu	eq	0.3.10
mk_anydropdownmenu	eq	0.3.12
mk_anydropdownmenu	eq	0.3.13
mk_anydropdownmenu	eq	0.3.23
mk_anydropdownmenu	eq	0.3.25
mk_anydropdownmenu	eq	0.3.26
mk_anydropdownmenu	eq	0.3.27