1 results (0.002 seconds)

CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0

SQL injection vulnerability in the auto BE User Registration (autobeuser) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Una vulnerabilidad de inyección de SQL en la extensión auto BE User Registration (autobeuser) de TYPO3 antes de la versión 0.0.2 permite a atacantes remotos ejecutar comandos SQL a través de vectores no especificados. • http://osvdb.org/48272 http://typo3.org/teams/security/security-bulletins/typo3-20080919-1 http://www.securityfocus.com/bid/31239 https://exchange.xforce.ibmcloud.com/vulnerabilities/45255 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •