Description
SQL injection vulnerability in the ultraCards (th_ultracards) extension before 0.5.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
References (2)
Core 2
Core References
Patch x_refsource_confirm
http://typo3.org/extensions/repository/view/th_ultracards/0.5.1/
Patch, Vendor Advisory x_refsource_confirm
http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-005/
Scores
EPSS
0.0100
EPSS Percentile
59.2%
Details
CWE
CWE-89
Status
published
Products (5)
thomas_hempel/th_ultracards
0.3.0
thomas_hempel/th_ultracards
0.4.0
thomas_hempel/th_ultracards
0.4.1
thomas_hempel/th_ultracards
0.4.2
thomas_hempel/th_ultracards
< 0.5.0
Published
Jul 22, 2010
Tracked Since
Feb 18, 2026