Unscored CVE-2005-0658 EUVD-2005-0659GHSA-659f-ffrh-w24w

SQL injection vulnerability in a third party extension to TYPO3 allows remote attackers to execute arbitrary SQL commands via the category_…

Published Mar 7, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in a third party extension to TYPO3 allows remote attackers to execute arbitrary SQL commands via the category_uid parameter.

References

20050304 RE: TYPO3 SQL Injection vunerabilitie mailing-list
20050303 TYPO3 SQL Injection vunerabilitie mailing-list
14465 third-party-advisory
20050304 Re: TYPO3 SQL Injection vunerabilitie mailing-list