Description
SQL injection vulnerability in the Backend History module in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 allows remote authenticated backend users to execute arbitrary SQL commands via unspecified vectors.
Remediation
References
Related Vulnerabilities
WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.24)
WordPress Plugin Anthologize Cross-Site Scripting (0.7.7)
WordPress Plugin U Extended Comment 'fileurl' Parameter Arbitrary File Download (1.0.1)
WordPress Plugin Visitor Traffic Real Time Statistics Cross-Site Request Forgery (2.12)
ownCloud Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-9041)