CVE-2013-4720

CVE-2013-4720

EPSS 1.2%

SQL injection vulnerability in the WEC Discussion Forum extension before 2.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/90413 https://exchange.xforce.ibmcloud.com/vulnerabilities/82217 http://typo3.org/extensions/repository/view/wec_discussion http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-005/http://www.securityfocus.com/bid/58054