[SECURITY] [DSA 1439-1] New typo3-src packages fix SQL injection

------------------------------------------------------------------------ Debian Security Advisory DSA-1439-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst December 28, 2007 http://www.debian.org/security/faq -...

CVE-2007-6381

SQL injection vulnerability in the indexedsearch system extension in TYPO3 3.x, 4.0 through 4.0.7, and 4.1 through 4.1.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2007-6381

TYPO3 indexed_search SQL Injection (CVE-2007-6381) affects TYPO3 3.x and 4.x (4.0.x up to 4.0.7; 4.1 up to 4.1.3). The issue stems from insufficient input sanitising, enabling remote authenticated users to execute arbitrary SQL commands via unspecified vectors in the indexed_search extension. Imp...

CVE-2007-6381

SQL injection vulnerability in the indexedsearch system extension in TYPO3 3.x, 4.0 through 4.0.7, and 4.1 through 4.1.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...