Unscored CVE-2015-1403 EUVD-2015-1540GHSA-m4v4-gxg5-x8hj

SQL injection vulnerability in the Content Rating extension 1.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL co…

Published Feb 3, 2015 · Updated Aug 6, 2024 · Assigned by mitre

Description

SQL injection vulnerability in the Content Rating extension 1.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

References

71984 vdb-entry
[oss-security] 20150111 CVE request: TYPO3-EXT-SA-2015-001, TYPO3-EXT-SA-2015-002, TYPO3-EXT-SA-2015-003 mailing-list
http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2015-002/
[oss-security] 20150127 Re: CVE request: TYPO3-EXT-SA-2015-001, TYPO3-EXT-SA-2015-002, TYPO3-EXT-SA-2015-003 mailing-list