CVE-2013-4870

SQL injection vulnerability in the News Search newssearch extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-4870

CVE-2013-4870 refers to a SQL injection vulnerability in the TYPO3 News Search (news_search) extension version 0.1.0. Multiple connected sources confirm that remote attackers can trigger arbitrary SQL commands via unspecified vectors, enabling partial confidentiality, integrity, and availability ...