4 matches found
CVE-2010-4887
SQL injection vulnerability in the Commenting system Backend Module commentsbe extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2010-4887
The CVE-2010-4887 entry relates to TYPO3’s Commenting system Backend Module (commentsbe) version 0.0.2 and earlier, where a SQL injection vulnerability could allow remote attackers to execute arbitrary SQL commands. Affected component: TYPO3 extension commentsbe. Root cause: SQL injection via uns...
PT-2011-1822
Name of the Vulnerable Software and Affected Versions TYPO3 Commenting system Backend Module commentsbe extension versions 0.0.2 and earlier Description A SQL injection issue exists in the Commenting system Backend Module commentsbe extension for TYPO3, allowing remote attackers to execute...
CVE-2010-4887: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Commenting system Backend Module commentsbe extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...