NetSight
IP …
high7.5

CVE-2010-0322

SQL injection vulnerability in the init function in MK-AnydropdownMenu (mk_anydropdownmenu) extension 0.3.28 and earlier for TYPO3 allows remote attackers to e…

Impact

SQL injection vulnerability in the init function in MK-AnydropdownMenu (mk_anydropdownmenu) extension 0.3.28 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected products

VendorProductAffected versions
Matthias KarrMk Anydropdownmenu
through 0.3.28
Versions 0.3.10, 0.3.12, 0.3.13, 0.3.23, 0.3.25

Weakness classification

CWE-89

References