Description
SQL injection vulnerability in the Versatile Calendar Extension [VCE] (sk_calendar) extension before 0.3.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
References (2)
Core 2
Core References
Patch, Vendor Advisory x_refsource_confirm
http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-005/
Patch x_refsource_confirm
http://typo3.org/extensions/repository/view/sk_calendar/0.3.4/
Scores
EPSS
0.0100
EPSS Percentile
59.2%
Details
CWE
CWE-89
Status
published
Products (9)
websedit/sk_calendar
0.1.0
websedit/sk_calendar
0.1.1
websedit/sk_calendar
0.2.0
websedit/sk_calendar
0.2.1
websedit/sk_calendar
0.2.2
websedit/sk_calendar
0.3.0
websedit/sk_calendar
0.3.1
websedit/sk_calendar
0.3.2
websedit/sk_calendar
< 0.3.3
Published
Jul 22, 2010
Tracked Since
Feb 18, 2026