CVE-2011-4960

SQL injection vulnerability in the Folder::findOrMake method in SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2011-4960

SQL injection vulnerability in the Folder::findOrMake method in SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2011-4960

SilverStripe releases 2.3.x prior to 2.3.12 and 2.4.x prior to 2.4.6 contain an SQL injection in Folder::findOrMake that allows remote execution of arbitrary SQL via unspecified vectors. Impact is described as remote code execution on the database side with partial confidentiality/integrity/avail...