CVE-2008-2489

The CVE-2008-2489 entry describes an SQL injection in TYPO3’s Library for Frontend Plugins (sg_zfelib) extension up to version 1.1.512. The vulnerability allows remote attackers to execute arbitrary SQL commands via an unspecified user input vector. Affected component: sg_zfelib (TYPO3). Root cau...