CVE-2017-7581

The CVE concerns TYPO3’s News module (NewsController.php) vulnerability CVE-2017-7581 affecting version 5.3.2 and earlier. It enables unauthenticated SQL injection through vectors involving overwriteDemand for order and OrderByAllowed, allowing arbitrary SQL execution. Connected materials referen...