CVE-2014-3759
si_bibtex 0.2.3 - SQL Injection via Search or List Functionality
Title source: llmDescription
Multiple SQL injection vulnerabilities in the BibTex Publications (si_bibtex) extension 0.2.3 for TYPO3 allow remote attackers to execute arbitrary SQL commands via vectors related to the (1) search or (2) list functionality.
References (4)
Core 4
Core References
Mailing List mailing-list
x_refsource_fulldisc
http://seclists.org/fulldisclosure/2014/Apr/314
Various Sources x_refsource_misc
https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140430-0_Typo3_si_bibtex_extension_SQL_injection_and_XSS_vulnerabilities_v10.txt
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/67145
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/531980/100/0/threaded
Scores
EPSS
0.0126
EPSS Percentile
66.5%
Details
CWE
CWE-89
Status
published
Products (1)
karlen_walter/si_bibtex
0.2.3
Published
May 16, 2014
Tracked Since
Feb 18, 2026