SQL Injection Vulnerability in TYPO3 DAM Frontend Extension
CVE-2008-3039

Currently unrated

Key Information:

Vendor

Typo3

Status
Dam Frontend Extension
Vendor
CVE Published:
7 July 2008

What is CVE-2008-3039?

A SQL injection vulnerability exists in the DAM Frontend extension for TYPO3, specifically affecting version 0.1.0 and earlier. This vulnerability allows remote attackers to manipulate SQL queries within the application, potentially leading to unauthorized access to sensitive data or executing arbitrary SQL commands. Due to the nature of this flaw, it is critical for users operating these affected versions to implement appropriate security measures and upgrade to secured versions promptly.

References

http://typo3.org/teams/security/security-bulletins/typo3-...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/30054
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/43477
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.