CVE-2012-1074: SQL Injection
Published Feb 14, 2012
·Updated
SQL injection vulnerability in the White Papers (mmwhtppr) extension 0.0.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
2 affected components
Typo3 Mm Whtppr<=0.0.4
Typo3 TYPO3
Event History
Feb 14, 2012
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-1074?
CVE-2012-1074 is classified as a high severity vulnerability due to its potential for SQL injection attacks.
2
How do I fix CVE-2012-1074?
To fix CVE-2012-1074, update the mm_whtppr extension to version 0.0.5 or later.
3
Which versions of TYPO3 are affected by CVE-2012-1074?
CVE-2012-1074 affects TYPO3 mm_whtppr extension versions 0.0.4 and earlier.
4
Can CVE-2012-1074 lead to data breaches?
Yes, CVE-2012-1074 can allow attackers to execute arbitrary SQL commands, potentially leading to data breaches.
5
What is the impact of exploiting CVE-2012-1074?
Exploiting CVE-2012-1074 can result in unauthorized access to the database and manipulation of data.