Sql injection

2013-08-1617:55:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.6%

JSON

Unspecified vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 has unknown impact and remote attack vectors, related to “Insecure Unserialize.”

CPENameOperatorVersion
locatorle2.9.1
locatoreq1.0.6
locatoreq1.0.7
locatoreq1.1.0
locatoreq1.1.8
locatoreq1.2.6
locatoreq1.2.8
locatoreq2.9.0

Name	Operator	Version
locator	le	2.9.1
locator	eq	1.0.6
locator	eq	1.0.7
locator	eq	1.1.0
locator	eq	1.1.8
locator	eq	1.2.6
locator	eq	1.2.8
locator	eq	2.9.0

References

osvdb.org/95967

secunia.com/advisories/54350

typo3.org/extensions/repository/view/locator

typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-013

www.securityfocus.com/bid/61606

exchange.xforce.ibmcloud.com/vulnerabilities/86233