CVE-2012-6144

SQL injection vulnerability in the Backend History module in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 allows remote authenticated backend users to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-6144

CVE-2012-6144 affects TYPO3’s Backend History module. The vulnerability is a SQL injection in the history component present in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6. Root cause: missing encoding of user input, enabling remote authenticated backend users to execute...