CVE-2012-1071

EXPLOITED IN THE WILD

Kitchen recipe <0.4.1 - SQL Injection

Title source: llm

Exploitation Summary

CVE-2012-1071 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io).

Description

SQL injection vulnerability in the Kitchen recipe (mv_cooking) extension before 0.4.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild as of February 2012.

References (6)

Core 6

Core References

Vendor Advisory x_refsource_misc

http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/72934

Various Sources x_refsource_misc

http://typo3.org/extensions/repository/view/mv_cooking/0.4.1/

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/51825

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/47437

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/78748

Scores

EPSS 0.0134

EPSS Percentile 68.3%

Details

VulnCheck KEV 2012-02-02

InTheWild.io 2017-08-29

CWE

CWE-89

Status published

Products (3)

mathieu_vidal/mv_cooking 0.1.0

mathieu_vidal/mv_cooking 0.3.0

mathieu_vidal/mv_cooking 0.4.0

Published Feb 14, 2012

Tracked Since Feb 18, 2026