CVE-2011-1722

The WEC Discussion Forum (wec_discussion) extension (version 2.1.0 and earlier ) for TYPO3 is susceptible to multiple SQL injection vulnerabilities. These flaws allow remote attackers to execute arbitrary SQL commands via unspecified vectors. This vulnerability was documented as being exploited i...