SQL injection vulnerability in the Formhandler extension before 1.4.1 for TYPO3 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-89,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| typoheads | formhandler | 0.9.8 |
| typoheads | formhandler | 0.9.13 |
| typoheads | formhandler | 0.9.12 |
| typoheads | formhandler | 1.0.0 |
| typoheads | formhandler | * |
| typoheads | formhandler | 0.9.9 |
| typoheads | formhandler | 0.9.6 |
| typoheads | formhandler | 1.2.0 |
| typoheads | formhandler | 0.9.15 |
| typoheads | formhandler | 1.3.0 |
| typoheads | formhandler | 0.9.11 |
| typoheads | formhandler | 0.9.14 |
| typoheads | formhandler | 0.9.7 |
| typoheads | formhandler | 0.9.5 |
| typoheads | formhandler | 0.9.3 |
| typoheads | formhandler | 1.1.0 |
| typoheads | formhandler | 0.9.4 |
| typoheads | formhandler | 0.9.10 |
| typoheads | formhandler | 0.9.16 |