Lucene search

K

Veracode Vulnerability DatabaseVERACODE:47356

HistoryJun 05, 2024 - 5:55 a.m.

SQL Injection

2024-06-0505:55:58

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

2

typo3

cms

sql injection

mysql passthrough

vulnerability

database escaping

api

8 High

AI Score

Confidence

Low

typo3/cms is vulnerable to SQL injection. The vulnerability is due to a flaw in the database escaping API when configured for MySQL passthrough mode, which affects all queries using DatabaseConnection::sql_query, even if arguments were properly escaped with DatabaseConnection::quoteStr.

8 High

AI Score

Confidence

Low