Description
SQL injection vulnerability in the Event (event) extension before 0.3.7 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
References (2)
Core 2
Core References
Various Sources x_refsource_confirm
http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015/
Patch x_refsource_misc
http://typo3.org/extensions/repository/view/event/0.3.7/
Scores
EPSS
0.0103
EPSS Percentile
60.0%
Details
CWE
CWE-89
Status
published
Products (5)
joachim_ruhs/event
0.2.2
joachim_ruhs/event
0.2.4
joachim_ruhs/event
0.2.5
joachim_ruhs/event
0.2.7
joachim_ruhs/event
< 0.3.4
Published
Oct 09, 2011
Tracked Since
Feb 18, 2026