CVE-2011-1722: SQL Injection
Multiple SQL injection vulnerabilities in WEC Discussion Forum (wecdiscussion) extension 2.1.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild in April 2011.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1722?
CVE-2011-1722 has a medium severity level due to its potential for remote SQL injection, allowing attackers to execute arbitrary SQL commands.
How do I fix CVE-2011-1722?
To fix CVE-2011-1722, upgrade the WEC Discussion Forum extension to version 2.1.1 or later.
Which versions of the WEC Discussion Forum are affected by CVE-2011-1722?
CVE-2011-1722 affects WEC Discussion Forum extension versions 2.1.0 and earlier, as well as versions 1.6.0 to 1.7.0.
Can CVE-2011-1722 be exploited remotely?
Yes, CVE-2011-1722 can be exploited remotely, allowing attackers to utilize SQL injection vulnerabilities.
Is there a known exploit for CVE-2011-1722?
Yes, there is evidence that CVE-2011-1722 was actively exploited in the wild in April 2011.