CVE-2010-4891 | BDVDB-2026-47640 Detail

Description#

SQL injection vulnerability in the Yet Another Calendar (ke_yac) extension before 1.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/42945
http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-018/
http://typo3.org/extensions/repository/view/ke_yac/1.1.2/

Exploit#

No public exploit known

History#

Version 12011-10-07Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.