PT-2013-5131

Name of the Vulnerable Software and Affected Versions typo3 sofortueberweisung2commerce extension versions prior to 2.0.1 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 2.0.1, update to version 2.0.1 or later to resolve the...

CVE-2013-4681: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the sofortueberweisung2commerce extension before 2.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...