SQL Injection Vulnerability in Content Rating Extension for TYPO3
CVE-2015-1403

Currently unrated

Key Information:

Vendor: Content Rating Project
Status: Content Rating
Vendor: CVE Published:; 3 February 2015

🔔 Create Content Rating Project Vulnerability Alert

What is CVE-2015-1403?

The Content Rating extension for TYPO3, versions 1.0.3 and earlier, contains a vulnerability that permits remote attackers to execute arbitrary SQL commands through unspecified vectors. This weakness could potentially compromise the integrity and confidentiality of the database, allowing unauthorized manipulation of data. It's crucial for users of the affected extension to apply the necessary patches to mitigate this risk.

References

http://www.securityfocus.com/bid/71984

vdb-entryx_refsource_BID

http://www.openwall.com/lists/oss-security/2015/01/11/7

mailing-listx_refsource_MLIST

http://typo3.org/teams/security/security-bulletins/typo3-...

x_refsource_MISC

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Feb 3, 2015
Vulnerability Reserved
Jan 27, 2015

CVE-2015-1403 Data

JSON