TYPO3 Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability - CVE-2013-1842 - Vulnerability Database

TYPO3

TYPO3 Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability - CVE-2013-1842

High

Reference: CVE-2013-1842

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2013-1842

Title: TYPO3 Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability

Overview:

SQL injection vulnerability in the Extbase Framework in TYPO3 4.5.x before 4.5.24 4.6.x before 4.6.17 4.7.x before 4.7.9 and 6.0.x before 6.0.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to quotthe Query Object Model and relation values.quot