News system (news) extension for TYPO3 vulnerable to SQL Injection

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2013-4748 · ADVISORY
• exchange.xforce.ibmcloud.com/vulnerabilities/81192 · WEB
• georgringer/news · PACKAGE
• web.archive.org/web/20130214093535/http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-001 · WEB
• typo3.org/extensions/repository/view/news · WEB
• osvdb.org/89134
• typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-001 · Vendor Advisory

georgringer/news のその他の脆弱性

• CVE-2026-8726高 8.2The extension fails to properly sanitize user input before using it in a database query. As a result, an unauthenticated attacker can inject…