CVE-2011-1722

Multiple SQL injection vulnerabilities in WEC Discussion Forum (wec_discussion) extension 2.1.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild in April 2011.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 71%
VendorProductVersion
webempoweredchurchwec_discussion
𝑥
≤ 2.1.0
webempoweredchurchwec_discussion
1.6.0
webempoweredchurchwec_discussion
1.6.1
webempoweredchurchwec_discussion
1.6.2
webempoweredchurchwec_discussion
1.6.3
webempoweredchurchwec_discussion
1.7.0
webempoweredchurchwec_discussion
2.0.1
webempoweredchurchwec_discussion
2.0.2
webempoweredchurchwec_discussion
2.0.3
webempoweredchurchwec_discussion
2.0.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/71674
http://secunia.com/advisories/44055
http://typo3.org/extensions/repository/view/wec_discussion/2.1.1/
http://typo3.org/teams/security/security-bulletins/typo3-sa-2011-003/
http://www.securityfocus.com/bid/47257
http://www.vupen.com/english/advisories/2011/0896
https://exchange.xforce.ibmcloud.com/vulnerabilities/66619
http://osvdb.org/71674
http://secunia.com/advisories/44055
http://typo3.org/extensions/repository/view/wec_discussion/2.1.1/
http://typo3.org/teams/security/security-bulletins/typo3-sa-2011-003/
http://www.securityfocus.com/bid/47257
http://www.vupen.com/english/advisories/2011/0896
https://exchange.xforce.ibmcloud.com/vulnerabilities/66619