WEC Map (wec_map) extension for TYPO3 allows SQL Injection

HOCH 7.5CVE-2014-6295 · GHSA-f3v6-g4mv-pjhq · Published 03/10/2014 · updated 17/06/2026

Kurz gesagt

CVE-2014-6295 ist eine Schwachstelle (HOCH (CVSS 7.5)) in jbartels/wec-map, web-tp3/wec_map, wec map (wec map project).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.2%, höher als bei 67.4% aller Schwachstellen.
Abhilfe: auf 3.0.3 oder neuer aktualisieren.

Package	Affected versions	Patched versions
jbartels/wec-map Packagist	`< 3.0.3`	`3.0.3`
web-tp3/wec_map Packagist	`< 3.0.3`	`3.0.3`
wec map wec_map_project	`= 3.0.0= 3.0.1≤ 3.0.2`	No fix yet

Description

SQL injection vulnerability in the WEC Map (wec_map) extension before 3.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

NVD description

SQL injection vulnerability in the WEC Map (wec_map) extension before 3.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

References

nvd.nist.gov/vuln/detail/CVE-2014-6295 · ADVISORY
typo3.org/security/advisory/typo3-ext-sa-2014-002 · WEB
typo3.org/extensions/repository/view/wec_map · WEB
typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-002 · Patch

Weitere Schwachstellen in jbartels/wec-map

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free