high7.5
CVE-2015-1405
SQL injection vulnerability in the Content Rating Extbase extension 2.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via u…
Impact
SQL injection vulnerability in the Content Rating Extbase extension 2.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Content Rating Extbase Project | Content Rating Extbase | through 2.0.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2015-003/
- http://www.openwall.com/lists/oss-security/2015/01/11/7
- http://www.openwall.com/lists/oss-security/2015/01/27/31
- http://www.securityfocus.com/bid/71985
- http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2015-003/
- http://www.openwall.com/lists/oss-security/2015/01/11/7
- http://www.openwall.com/lists/oss-security/2015/01/27/31
- http://www.securityfocus.com/bid/71985