cbcvebase.

News System Project News System vulnerabilities

1 known vulnerability affecting news_system_project/news_system.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2017-7581P2CRITICALCVSS 9.8PoC≤ 5.3.22017-04-07
CVE-2017-7581 [CRITICAL] CWE-89 CVE-2017-7581: SQL injection vulnerability in NewsController.php in the News module 5.3.2 and earlier for TYPO3 all SQL injection vulnerability in NewsController.php in the News module 5.3.2 and earlier for TYPO3 allows unauthenticated users to execute arbitrary SQL commands via vectors involving overwriteDemand for order and OrderByAllowed.
nvd
News System Project News System vulnerabilities | cvebase