high7.5
CVE-2013-5310
SQL injection vulnerability in the DB Integration (wfqbe) extension before 2.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspec…
Impact
SQL injection vulnerability in the DB Integration (wfqbe) extension before 2.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mauro Lorenzutti | Wfqbe | through 2.0.0 Version 1.3.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/95957
- http://typo3.org/extension-manuals/wfqbe/2.0.1/view/1/5/
- http://typo3.org/extensions/repository/view/wfqbe
- http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-013
- http://www.securityfocus.com/bid/61653
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86238
- http://osvdb.org/95957
- http://typo3.org/extension-manuals/wfqbe/2.0.1/view/1/5/
- http://typo3.org/extensions/repository/view/wfqbe
- http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-013
- http://www.securityfocus.com/bid/61653
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86238