2 matches found
CVE-2009-4394: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Random Prayer 2 steprayer2 extension 0.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
7.5CVSS6.4AI score0.01511EPSS
SaveExploits0References2
CVE-2008-6461: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Random Prayer 2 steprayer2 extension before 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
7.5CVSS6.4AI score0.01063EPSS
SaveExploits0References2
20