Description

SQL injection vulnerability in the Extbase Framework in TYPO3 4.5.x before 4.5.24, 4.6.x before 4.6.17, 4.7.x before 4.7.9, and 6.0.x before 6.0.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to "the Query Object Model and relation values."

Remediation

References

CVE-2013-1842

Related Vulnerabilities

Wordpress Plugin Backup Migration Files or Directories Accessible to External Parties Vulnerability (CVE-2023-6266)

WordPress Plugin SP Project & Document Manager Unspecified Vulnerability (2.6.2.5)

WordPress Plugin Coming Soon, Under Construction & Maintenance Mode By Dazzler Cross-Site Scripting (1.6.6)

IBM RTC Generation of Error Message Containing Sensitive Information (CVE-2020-4487)

WordPress Plugin Free Responsive Post/Article Author Section for WordPress-Ultimate Author Box Lite includes Backdoor [Only if downloaded via the vendor website] (1.1.2)

Severity

High

Classification

CVE-2013-1842 CWE-138

Tags

Missing Update Known Vulnerabilities