CVE-2015-2803 SQL injection vulnerability in mod1/index.php in the Akronymmanager (sb_akronymmanager) extension before 7.0.0 for TYPO3 allows remote authenticated users with permission to maintain acronyms to execu...
MediumCVSS 6.0
EPSS 3.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in mod1/index.php in the Akronymmanager (sb_akronymmanager) extension before 7.0.0 for TYPO3 allows remote authenticated users with permission to maintain acronyms to execute arbitrary SQL commands via the id parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| akronymmanager project akronymmanager | <= 0.5.0 | No fix listed |
References
- packetstormsecurity.com exploit
- 20150615 [RT-SA-2015-002] SQL Injection in TYPO3 Extension Akronymmanager exploit mailing-list
- typo3.org patch
- 20150615 [RT-SA-2015-002] SQL Injection in TYPO3 Extension Akronymmanager mailing-list
- 75191 vdb-entry
- 37301 exploit
- www.redteam-pentesting.de exploit