CVE-2008-6696 Information

Description

SQL injection vulnerability in Fussballtippspiel (toto) 0.1.1 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

Reference

http://osvdb.org/46394 http://typo3.org/extensions/repository/view/toto/0.1.2/ http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/ http://www.securityfocus.com/bid/29824 https://exchange.xforce.ibmcloud.com/vulnerabilities/43212