CVE-2015-4610

The vulnerability affects the TYPO3 Store Locator extension (locator) prior to version 3.3.1 . It is a SQL injection flaw that allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. The issue originates from the extension’s handling of database queries, leadi...