Sql injection

2014-10-0314:55:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.0%

JSON

SQL injection vulnerability in the Statistics (ke_stats) extension before 1.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild in February 2014.

CPENameOperatorVersion
statisticsle1.1.1

CPE	Name	Operator	Version
	statistics	le	1.1.1

References

typo3.org/extensions/repository/view/ke_stats

typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-002/