Sql injection

2011-10-0910:55:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

49.3%

JSON

SQL injection vulnerability in the Event (event) extension before 0.3.7 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CPENameOperatorVersion
eventle0.3.4
eventeq0.2.2
eventeq0.2.4
eventeq0.2.5
eventeq0.2.7

Name	Operator	Version
event	le	0.3.4
event	eq	0.2.2
event	eq	0.2.4
event	eq	0.2.5
event	eq	0.2.7

References

typo3.org/extensions/repository/view/event/0.3.7/

typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/