CVE-2010-0322

https://notcve.org/view.php?id=CVE-2010-0322

SQL injection vulnerability in the init function in MK-AnydropdownMenu (mk_anydropdownmenu) extension 0.3.28 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Vulnerabilidad de inyección SQL en la función init de la extensión de TYPO3 "MK-AnydropdownMenu" v0.3.28 y anteriores permite a atacantes remotos ejecutar comandos SQL a través de vectores no especificados. • http://typo3.org/extensions/repository/view/mk_anydropdownmenu/0.4.0 http://typo3.org/extensions/repository/view/mk_anydropdownmenu/0.4.0/info/ChangeLog http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •