CVE-2008-4657

  • Last update: Apr 13, 2023

Description

SQL injection vulnerability in the Econda Plugin (econda) 0.0.2 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Software From Fixed in
typo3 / econda_plugin - 0.0.2.x
typo3 / econda_plugin 0.0.1 0.0.1.x

Details

    • Severity: High
  • CVE: CVE-2008-4657
  • Published: Oct 22, 2008
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v2

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs

OWASP TOP 10