CVE-2014-6233 SQL injection vulnerability in the Flat Manager (flatmgr) extension before 2.7.10 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
HighCVSS 7.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in the Flat Manager (flatmgr) extension before 2.7.10 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| flat manager project flat manager | <= 2.7.9 | No fix listed |
References
- 60876 third-party-advisory
- typo3.org patch
- typo3.org patch vendor-advisory
- 69561 vdb-entry
- flatmgr-unspecified-sql-injection(95703) vdb-entry