WEC Map (wec_map) extension for TYPO3 allows SQL Injection

ALTO 7.5CVE-2014-6295 · GHSA-f3v6-g4mv-pjhq · Published 03/10/2014 · updated 17/06/2026

In breve

CVE-2014-6295 è una vulnerabilità ALTO (CVSS 7.5) che riguarda jbartels/wec-map, web-tp3/wec_map, wec map (wec map project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.2%, superiore al 67.4% delle vulnerabilità.
Correzione: aggiornare a 3.0.3 o successiva.

Package	Affected versions	Patched versions
jbartels/wec-map Packagist	`< 3.0.3`	`3.0.3`
web-tp3/wec_map Packagist	`< 3.0.3`	`3.0.3`
wec map wec_map_project	`= 3.0.0= 3.0.1≤ 3.0.2`	No fix yet

Description

SQL injection vulnerability in the WEC Map (wec_map) extension before 3.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

NVD description

SQL injection vulnerability in the WEC Map (wec_map) extension before 3.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

References

nvd.nist.gov/vuln/detail/CVE-2014-6295 · ADVISORY
typo3.org/security/advisory/typo3-ext-sa-2014-002 · WEB
typo3.org/extensions/repository/view/wec_map · WEB
typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-002 · Patch

Altre vulnerabilità di jbartels/wec-map

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free