CVE-2011-1722observed exploitation

CVE-2011-1722

Published · Updated

25Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck.

ssvc Attendepss 1.3%
from disclosure to weapon
Published on NVDApr 19
VulnCheckApr 7
exploitation probability
1.3%top 30% of all CVEs
observed exploitation
yesVulnCheck
Multiple SQL injection vulnerabilities in WEC Discussion Forum (wec_discussion) extension 2.1.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild in April 2011.
Affected products
n/a · n/a
References
http://osvdb.org/71674http://secunia.com/advisories/44055https://exchange.xforce.ibmcloud.com/vulnerabilities/66619http://typo3.org/extensions/repository/view/wec_discussion/2.1.1/http://typo3.org/teams/security/security-bulletins/typo3-sa-2011-003/http://www.securityfocus.com/bid/47257http://www.vupen.com/english/advisories/2011/0896