CVE-2008-2489

The CVE-2008-2489 entry describes an SQL injection in TYPO3’s Library for Frontend Plugins (sg_zfelib) extension up to version 1.1.512. The vulnerability allows remote attackers to execute arbitrary SQL commands via an unspecified user input vector. Affected component: sg_zfelib (TYPO3). Root cau...

CVE-2008-2489: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Library for Frontend Plugins aka sgzfelib extension 1.1.512 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified "user input."...