high7.5
CVE-2008-3044
SQL injection vulnerability in the News Calendar (newscalendar) extension 1.0.7 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands…
Impact
SQL injection vulnerability in the News Calendar (newscalendar) extension 1.0.7 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Typo3 | News Calendar Extension | through 1.0.7 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/30885
- http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/
- http://www.securityfocus.com/bid/30056
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43485
- http://secunia.com/advisories/30885
- http://typo3.org/teams/security/security-bulletins/typo3-20080701-1/
- http://www.securityfocus.com/bid/30056
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43485