CVE-2010-1004

SQL injection vulnerability in the Yet another TYPO3 search engine YATSE extension before 0.3.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-1004

CVE-2010-1004 affects the Yet another TYPO3 search engine (YATSE) extension for TYPO3, up to version 0.3.1. The vulnerability is a SQL injection in an unspecified vector that could allow remote attackers to execute arbitrary SQL commands. The fixed version is 0.3.2. If exploited, the impact would...