CVE

Id
49634  
CVE No.
CVE-2011-1722  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in WEC Discussion Forum (wec_discussion) extension 2.1.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild in April 2011.  
Phase
Assigned (20110419)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
538876 49634 CVE-2011-1722 CONFIRM:http://typo3.org/extensions/repository/view/wec_discussion/2.1.1/  View
538877 49634 CVE-2011-1722 CONFIRM:http://typo3.org/teams/security/security-bulletins/typo3-sa-2011-003/  View
538878 49634 CVE-2011-1722 BID:47257  View
538879 49634 CVE-2011-1722 URL:http://www.securityfocus.com/bid/47257  View
538880 49634 CVE-2011-1722 OSVDB:71674  View
538881 49634 CVE-2011-1722 URL:http://osvdb.org/71674  View
538882 49634 CVE-2011-1722 SECUNIA:44055  View
538883 49634 CVE-2011-1722 URL:http://secunia.com/advisories/44055  View
538884 49634 CVE-2011-1722 VUPEN:ADV-2011-0896  View
538885 49634 CVE-2011-1722 URL:http://www.vupen.com/english/advisories/2011/0896  View
538886 49634 CVE-2011-1722 XF:wecdiscussionforum-multiple-sql-injection(66619)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
34279 JVNDB-2011-004521 HP SiteScope におけるクロスサイトスクリプティングの脆弱性 HP SiteScope には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-1727 49634 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004521.html  View