CVE-2017-7581

SQL injection vulnerability in NewsController.php in the News module 5.3.2 and earlier for TYPO3 allows unauthenticated users to execute arbitrary SQL commands via vectors involving overwriteDemand for order and OrderByAllowed...

CVE-2017-7581

The CVE concerns TYPO3’s News module (NewsController.php) vulnerability CVE-2017-7581 affecting version 5.3.2 and earlier. It enables unauthenticated SQL injection through vectors involving overwriteDemand for order and OrderByAllowed, allowing arbitrary SQL execution. Connected materials referen...