Description
SQL injection vulnerability in the Extbase Framework in TYPO3 4.5.x before 4.5.24, 4.6.x before 4.6.17, 4.7.x before 4.7.9, and 6.0.x before 6.0.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to "the Query Object Model and relation values."
Remediation
References
Related Vulnerabilities
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-2133)
WordPress Plugin WP Accessibility Cross-Site Scripting (1.6.10)
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2007-1460)
WordPress Plugin MasterStudy LMS-for Online Courses and Education Security Bypass (3.2.13)
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-5339)