CVE-2008-3053

Description

SQL injection vulnerability in the SQL Frontend (mh_omsqlio) extension 1.0.11 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected products

• TYPO3 / sql_frontend_extension1.0.11
• TYPO3 / sql_frontend_extension1.0.0 – 1.0.0
• TYPO3 / sql_frontend_extension1.0.1 – 1.0.1
• TYPO3 / sql_frontend_extension1.0.2 – 1.0.2
• TYPO3 / sql_frontend_extension1.0.3 – 1.0.3
• TYPO3 / sql_frontend_extension1.0.4 – 1.0.4
• TYPO3 / sql_frontend_extension1.0.5 – 1.0.5
• TYPO3 / sql_frontend_extension1.0.6 – 1.0.6
• TYPO3 / sql_frontend_extension1.0.7 – 1.0.7
• TYPO3 / sql_frontend_extension1.0.8 – 1.0.8
• TYPO3 / sql_frontend_extension1.0.9 – 1.0.9
• TYPO3 / sql_frontend_extension1.0.10 – 1.0.10

References

• MISChttp://typo3.org/teams/security/security-bulletins/typo3-20080701-1/
• VENDOR_ADVISORYhttp://secunia.com/advisories/30885
• MISChttp://www.securityfocus.com/bid/30051
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/43483