SQL Injection Vulnerability in TYPO3 SQL Frontend Extension by TYPO3
CVE-2008-3053

Currently unrated

Key Information:

Vendor

Typo3

Status
Sql Frontend Extension
Vendor
CVE Published:
7 July 2008

What is CVE-2008-3053?

A SQL injection vulnerability exists in the SQL Frontend (mh_omsqlio) extension for TYPO3, allowing remote attackers to execute arbitrary SQL commands through unspecified vectors. This flaw can potentially compromise the integrity of the database and expose sensitive information, making it crucial for users running version 1.0.11 or earlier to apply security updates immediately.

References

http://typo3.org/teams/security/security-bulletins/typo3-...
x_refsource_CONFIRM
http://secunia.com/advisories/30885
third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/30051
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.