CVE-2011-3583

TYPO3 Core versions 4.5.0–4.5.5 are vulnerable to SQL injection due to prepared statements where parameter values may not be properly substituted. The issue requires two or more query parameters bound, with at least two coming from user input. This is documented across multiple feeds (including R...