CVE-2012-1077

Affected software: TYPO3 with bc_post2facebook extension prior to 0.2.2. Vulnerability: SQL injection in the bc_post2facebook (Post data records to Facebook) extension allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Root cause: unsafeguarded SQL construction in ...