CVE-2012-6577: SQL Injection
SQL injection vulnerability in the Formhandler extension before 1.4.1 for TYPO3 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-6577?
CVE-2012-6577 has a medium severity rating due to the potential for remote authenticated users to execute arbitrary SQL commands.
How do I fix CVE-2012-6577?
To fix CVE-2012-6577, upgrade the Formhandler extension to version 1.4.1 or later.
Who is affected by CVE-2012-6577?
CVE-2012-6577 affects remote authenticated users with specific permissions on versions of the Formhandler extension prior to 1.4.1.
What type of vulnerability is CVE-2012-6577?
CVE-2012-6577 is an SQL injection vulnerability that can be exploited to execute arbitrary SQL commands.
Can CVE-2012-6577 affect system security?
Yes, CVE-2012-6577 can compromise system security by allowing attackers to manipulate the database through SQL injection.