Unscored CVE-2012-6577 EUVD-2012-6424GHSA-h425-q855-c9xx

SQL injection vulnerability in the Formhandler extension before 1.4.1 for TYPO3 allows remote authenticated users with certain permissions …

Published Jun 27, 2013 · Updated Aug 6, 2024 · Assigned by mitre

Description

SQL injection vulnerability in the Formhandler extension before 1.4.1 for TYPO3 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors.

References

http://typo3.org/extensions/repository/view/formhandler
typo3-formhandler-unspecified-sql-injection(79670) vdb-entry
http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-012/