Unscored CVE-2008-5609 EUVD-2008-5584GHSA-hm6j-294p-cf8w

SQL injection vulnerability in the Commerce extension 0.9.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands…

Published Dec 17, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in the Commerce extension 0.9.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

References

ADV-2008-2870 vdb-entry
http://typo3.org/teams/security/security-bulletins/typo3-20081020-2/
http://typo3.org/extensions/repository/view/commerce/0.9.7/