CVE-2013-4634

Summary: TYPO3’s jQuery autocomplete for indexed_search (rzautocomplete) extension is vulnerable to SQL injection in all versions before 0.0.9, as described in CVE-2013-4634. Impact: Remote attackers could execute arbitrary SQL commands via unspecified vectors. Affected component: rzautocomplete ...

PT-2013-5113

Name of the Vulnerable Software and Affected Versions TYPO3 extension rzautocomplete versions prior to 0.0.9 Description A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 0.0.9, update to version 0.0.9 or later to...

CVE-2013-4634: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the jQuery autocomplete for indexedsearch rzautocomplete extension before 0.0.9 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...