Description
SQL injection vulnerability in Download system (sb_downloader) extension 0.1.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
References
- 46390 vdb-entry
- 30737 third-party-advisory
- 29825 vdb-entry
- sbdownloader-unspecified-sql-injection(43208) vdb-entry
- http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/