Description
SQL injection vulnerability in the Tiny Market (hm_tinymarket) extension 0.5.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-018/
Scores
EPSS
0.0104
EPSS Percentile
60.4%
Details
CWE
CWE-89
Status
published
Products (1)
marco_hezel/hm_tinymarket
< 0.5.4
Published
Oct 07, 2011
Tracked Since
Feb 18, 2026