| Package | Affected versions | Patched versions |
|---|---|---|
| typo | = 1.6= 1.6.8= 2.0.0= 2.0.1= 2.0.5= 2.0.6= 2.5.0= 2.5.1= 2.5.2= 2.5.3= 2.5.4= 2.5.5= 2.5.6= 2.5.7= 2.5.8= 2.6.0= 3.99.0= 3.99.1= 3.99.2= 3.99.3= 3.99.4= 4.0.0= 4.1.1= 5.0.2= 5.0.3= 5.0.3.98= 5.0.3.98.1= 5.1= 5.1.1= 5.1.2≤ 5.1.3 |
SQL injection vulnerability in the "Manage pages" feature (admin/pages) in Typo 5.1.3 and earlier allows remote authenticated users with "blog publisher" rights to execute arbitrary SQL commands via the search[published_at] parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free