CVE-2012-1071

SQL injection in TYPO3’s Kitchen recipe (mv_cooking) extension before 0.4.1 allows remote attackers to execute arbitrary SQL via unspecified vectors; as described, it was exploited in the wild as of February 2012. Affected component: mv_cooking for TYPO3 (versions prior to 0.4.1). The available d...