CVE

Id
74501  
CVE No.
CVE-2014-7201  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in the search function in pi1/class.tx_dmmjobcontrol_pi1.php in the JobControl (dmmjobcontrol) extension 2.14.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via the (1) education, (2) region, or (3) sector fields, as demonstrated by the tx_dmmjobcontrol_pi1[search][sector][] parameter to jobs/.  
Phase
Assigned (20140926)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
695142 74501 CVE-2014-7201 FULLDISC:20140925 MSA-2014-02: Typo3 Extension dmmjobcontrol Multiple Vulnerabilities (typo3-ext-sa-2014-012)  View
695143 74501 CVE-2014-7201 URL:http://seclists.org/fulldisclosure/2014/Sep/89  View
695144 74501 CVE-2014-7201 MISC:http://packetstormsecurity.com/files/128446/Typo3-JobControl-2.14.0-Cross-Site-Scripting-SQL-Injection.html  View
695145 74501 CVE-2014-7201 MISC:http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-012  View
695146 74501 CVE-2014-7201 MISC:https://www.mogwaisecurity.de/advisories/MSA-2014-02.txt  View
695147 74501 CVE-2014-7201 BID:70155  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
18453 JVNDB-2014-007328 GParted における root 権限を持つ任意のコマンドを実行される脆弱性 GParted には、root 権限を持つ任意のコマンドを実行される脆弱性が存在します。 CVE-2014-7208 74501 7.2 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007328.html  View