Description
SQL injection vulnerability in the CoolURI extension before 1.0.30 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | bednee/cooluri | < 1.0.30 | 1.0.30 | GHSA-r3rw-h5v8-ff6h |
References
- http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-003/
- 58055 vdb-entry
- http://typo3.org/extensions/repository/view/cooluri
- 52282 third-party-advisory
- typo3-cooluri-unspec-sql-injection(82213) vdb-entry
- 90415 vdb-entry