CVE-2012-1071

SQL injection vulnerability in the Kitchen recipe (mv_cooking) extension before 0.4.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild as of February 2012.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 71%
VendorProductVersion
mathieu_vidalmv_cooking
0.1.0
mathieu_vidalmv_cooking
0.3.0
mathieu_vidalmv_cooking
0.4.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/78748
http://secunia.com/advisories/47437
http://typo3.org/extensions/repository/view/mv_cooking/0.4.1/
http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/
http://www.securityfocus.com/bid/51825
https://exchange.xforce.ibmcloud.com/vulnerabilities/72934
http://osvdb.org/78748
http://secunia.com/advisories/47437
http://typo3.org/extensions/repository/view/mv_cooking/0.4.1/
http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/
http://www.securityfocus.com/bid/51825
https://exchange.xforce.ibmcloud.com/vulnerabilities/72934