high7.5
CVE-2008-6696
SQL injection vulnerability in Fussballtippspiel (toto) 0.1.1 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unk…
Impact
SQL injection vulnerability in Fussballtippspiel (toto) 0.1.1 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Manu Oehler | Toto | through 0.1.1 Version 0.1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/46394
- http://typo3.org/extensions/repository/view/toto/0.1.2/
- http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/
- http://www.securityfocus.com/bid/29824
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43212
- http://osvdb.org/46394
- http://typo3.org/extensions/repository/view/toto/0.1.2/
- http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/
- http://www.securityfocus.com/bid/29824
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43212