SQL Injection Vulnerability in TYPO3 Content Rating Extbase Extension
CVE-2015-1405

Currently unrated

Key Information:

Vendor: Content Rating Extbase Project
Status: Content Rating Extbase
Vendor: CVE Published:; 3 February 2015

🔔 Create Content Rating Extbase Project Vulnerability Alert

What is CVE-2015-1405?

The Content Rating Extbase extension in TYPO3 prior to version 2.0.4 has an SQL injection vulnerability that permits remote attackers to execute arbitrary SQL commands. This may lead to unauthorized access to the database or modification of sensitive information. Proper input validation is crucial to mitigate the risk associated with this vulnerability.

References

http://www.securityfocus.com/bid/71985

vdb-entryx_refsource_BID

http://www.openwall.com/lists/oss-security/2015/01/11/7

mailing-listx_refsource_MLIST

http://typo3.org/teams/security/security-bulletins/typo3-...

x_refsource_MISC

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Feb 3, 2015
Vulnerability Reserved
Jan 27, 2015

CVE-2015-1405 Data

JSON