Description
SQL injection vulnerability in the Tour Extension (pm_tour) extension before 0.0.13 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
References (1)
Core 1
Core References
Patch, Vendor Advisory x_refsource_confirm
http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-010/
Scores
EPSS
0.0102
EPSS Percentile
59.9%
Details
CWE
CWE-89
Status
published
Products (5)
markus_barchfeld/pm_tour
0.0.7
markus_barchfeld/pm_tour
0.0.8
markus_barchfeld/pm_tour
0.0.10
markus_barchfeld/pm_tour
0.0.11
markus_barchfeld/pm_tour
< 0.0.12
Published
Mar 15, 2010
Tracked Since
Feb 18, 2026