Unscored CVE-2013-4720 EUVD-2013-4571GHSA-7wrj-5mg8-rqhh

SQL injection vulnerability in the WEC Discussion Forum extension before 2.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL c…

Published Jun 27, 2013 · Updated Aug 6, 2024 · Assigned by mitre

Description

SQL injection vulnerability in the WEC Discussion Forum extension before 2.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

References

58054 vdb-entry
typo3-wecdiscussion-unspec-sql-injection(82217) vdb-entry
http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-005/
http://typo3.org/extensions/repository/view/wec_discussion
90413 vdb-entry