CVE-2010-1027

SQL injection vulnerability in the Meet Travelmates (travelmate) extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:dietmar_schffer:travelmate:*:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*

History

21 Nov 2024, 01:13

Type Values Removed Values Added
References () http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006/ - Vendor Advisory () http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006/ - Vendor Advisory
References () http://www.securityfocus.com/bid/38802 - () http://www.securityfocus.com/bid/38802 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/56980 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/56980 -

Information

Published : 2010-03-19 19:00

Updated : 2024-11-21 01:13


NVD link : CVE-2010-1027

Mitre link : CVE-2010-1027

CVE.ORG link : CVE-2010-1027


JSON object : View

Products Affected

typo3

  • typo3

dietmar_schffer

  • travelmate
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')