On 09/03/13 22:43, Carlos Alberto Lopez Perez wrote:
> It has been discovered that TYPO3 Core is susceptible to SQL Injection
> and Open Redirection.
> 
> Here is the relevant information:
> 
> https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-001/
> 
> A CVE number was asked at: http://seclists.org/oss-sec/2013/q1/611

Forgot to mention that the SQL Injection is being exploited on the wild.

"""
Note: It has been reported to the TYPO3 Security Team that this problem
is known and exploited in the wild.
"""

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to