CVE-2008-6460: SQL Injection
Published Mar 13, 2009
·Updated
SQL injection vulnerability in the Simple Random Objects (mwrandomobjects) extension 1.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
4 affected components
Typo3 TYPO3
Mirko Werner Mw Random Objects<=1.0.3
All of the following
Typo3 TYPO3
Mirko Werner Mw Random Objects<=1.0.3
Event History
Mar 13, 2009
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
10:30 AM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·10:30 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-6460?
CVE-2008-6460 is classified as a high severity SQL injection vulnerability.
2
How do I fix CVE-2008-6460?
To fix CVE-2008-6460, upgrade the Simple Random Objects extension to version 1.0.4 or later.
3
What software is affected by CVE-2008-6460?
CVE-2008-6460 affects the Simple Random Objects extension version 1.0.3 and earlier for TYPO3.
4
Can CVE-2008-6460 allow remote attacks?
Yes, CVE-2008-6460 allows remote attackers to execute arbitrary SQL commands.
5
What are the potential impacts of CVE-2008-6460?
The potential impacts of CVE-2008-6460 include unauthorized data manipulation and access to sensitive information.