Sql injection

2017-04-0719:59:00

PRIOn knowledge base

www.prio-n.com

9.7 High

AI Score

Confidence

High

0.93 High

EPSS

Percentile

99.1%

JSON

SQL injection vulnerability in NewsController.php in the News module 5.3.2 and earlier for TYPO3 allows unauthenticated users to execute arbitrary SQL commands via vectors involving overwriteDemand for order and OrderByAllowed.

CPENameOperatorVersion
news_systemle5.3.2

CPE	Name	Operator	Version
	news_system	le	5.3.2

References

www.ambionics.io/blog/typo3-news-module-sqli