CVE-2008-6697

SQL injection vulnerability in TARGET-E WorldCup Bets (worldcup) 2.0.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*
OR cpe:2.3:a:michael_fritz:worldcup:1.2.8:*:*:*:*:*:*:*
cpe:2.3:a:michael_fritz:worldcup:0.1.9:*:*:*:*:*:*:*
cpe:2.3:a:michael_fritz:worldcup:*:*:*:*:*:*:*:*
cpe:2.3:a:michael_fritz:worldcup:1.2.9:*:*:*:*:*:*:*
cpe:2.3:a:michael_fritz:worldcup:1.3.0:*:*:*:*:*:*:*

Information

Published : 2009-04-10 15:00

Updated : 2017-08-16 18:29


NVD link : CVE-2008-6697

Mitre link : CVE-2008-6697


JSON object : View

CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Advertisement

dedicated server usa

Products Affected

typo3

  • typo3

michael_fritz

  • worldcup