|
|
| |
|
| |
typo3-src: multiple vulnerabilities
| Package(s): | typo3-src |
CVE #(s): | CVE-2013-1842
CVE-2013-1843
|
| Created: | March 18, 2013 |
Updated: | March 21, 2013 |
| Description: |
From the Debian advisory:
CVE-2013-1842:
Helmut Hummel and Markus Opahle discovered that the Extbase database layer was not correctly sanitizing user input when using the Query object model. This can lead to SQL injection by a malicious user inputing crafted
relation values.
CVE-2013-1843:
Missing user input validation in the access tracking mechanism could lead
to arbitrary URL redirection.
See the upstream advisory for additional information. |
| Alerts: |
|
( Log in to post comments)
|
|
|