CVE-2008-6692

https://notcve.org/view.php?id=CVE-2008-6692

SQL injection vulnerability in Diocese of Portsmouth Training Courses (pd_trainingcourses) extension 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors. Vulnerabilidad de inyección SQL en Diocese of Portsmouth Training Courses (pd_trainingcourses), extensión v0.1.1 para TYPO3, permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores desconocidos. • http://osvdb.org/46389 http://typo3.org/teams/security/security-bulletins/typo3-20080619-1 http://www.securityfocus.com/bid/29822 https://exchange.xforce.ibmcloud.com/vulnerabilities/43207 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •