Sql injection

SQL injection vulnerability in the wtdirectory extension before 1.4.2 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

PT-2015-6636

Name of the Vulnerable Software and Affected Versions TYPO3 wt directory extension versions prior to 1.4.2 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For versions prior to 1.4.2, update to version 1.4.2 or later to resolve the issue...

PT-2014-7114

Name of the Vulnerable Software and Affected Versions TYPO3 wt directory extension versions prior to 1.4.1 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 1.4.1, update to version 1.4.1 or later to resolve the issu...