CVE

Id
59387  
CVE No.
CVE-2012-6144  
Status
Candidate  
Description
SQL injection vulnerability in the Backend History module in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 allows remote authenticated backend users to execute arbitrary SQL commands via unspecified vectors.  
Phase
Assigned (20121206)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
604952 59387 CVE-2012-6144 MLIST:[oss-security] 20130619 Re: Re: [Ticket#2012111110000015] TYPO3-CORE-SA-2012-005: Several Vulnerabilities in TYPO3 Core  View
604953 59387 CVE-2012-6144 URL:http://www.openwall.com/lists/oss-security/2013/06/19/4  View
604954 59387 CVE-2012-6144 CONFIRM:http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-005/  View
604955 59387 CVE-2012-6144 OSVDB:87115  View
604956 59387 CVE-2012-6144 URL:http://osvdb.org/87115  View
604957 59387 CVE-2012-6144 XF:typo3-backendhistory-unspec-sql-injection(79964)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30440 JVNDB-2012-006148 Spacewalk および Red Hat Network Satellite の systems/sdc/notes.jsp におけるクロスサイトスクリプティングの脆弱性 Spacewalk および Red Hat Network (RHN) Satellite の systems/sdc/notes.jsp には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-6149 59387 3.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006148.html  View