Arbitrary SQL Command Execution Vulnerability in Content Rating Extbase Extension for TYPO3

Arbitrary SQL Command Execution Vulnerability in Content Rating Extbase Extension for TYPO3

CVE-2015-1405 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

SQL injection vulnerability in the Content Rating Extbase extension 2.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Learn more about our Web Application Penetration Testing UK.