cve-2012-6577
Vulnerability from cvelistv5
Published
2013-06-27 20:00
Modified
2024-08-06 21:36
Severity ?
EPSS score ?
Summary
SQL injection vulnerability in the Formhandler extension before 1.4.1 for TYPO3 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors.
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T21:36:01.406Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://typo3.org/extensions/repository/view/formhandler"
},
{
"name": "typo3-formhandler-unspecified-sql-injection(79670)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79670"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-012/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2012-10-25T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "SQL injection vulnerability in the Formhandler extension before 1.4.1 for TYPO3 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-28T12:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://typo3.org/extensions/repository/view/formhandler"
},
{
"name": "typo3-formhandler-unspecified-sql-injection(79670)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79670"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-012/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2012-6577",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "SQL injection vulnerability in the Formhandler extension before 1.4.1 for TYPO3 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://typo3.org/extensions/repository/view/formhandler",
"refsource": "CONFIRM",
"url": "http://typo3.org/extensions/repository/view/formhandler"
},
{
"name": "typo3-formhandler-unspecified-sql-injection(79670)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79670"
},
{
"name": "http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-012/",
"refsource": "MISC",
"url": "http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-012/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2012-6577",
"datePublished": "2013-06-27T20:00:00",
"dateReserved": "2013-06-27T00:00:00",
"dateUpdated": "2024-08-06T21:36:01.406Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"configurations": "[{\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:typoheads:formhandler:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"1.4.0\", \"matchCriteriaId\": \"76CCC153-4300-4432-8594-679C4616841B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:typoheads:formhandler:0.9.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"600A1B78-85DA-4E95-9F5E-F18C1F0FC18F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:typoheads:formhandler:0.9.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D0393982-19A0-402C-BA22-93F4B350894E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:typoheads:formhandler:0.9.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7625E110-1051-4DE8-9B37-96124D1E7B1D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:typoheads:formhandler:0.9.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"066424CE-B605-45E8-A70F-53FDC8842518\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:typoheads:formhandler:0.9.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0D68E43D-C6AB-4DA6-BAB5-1A29633F7CDF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:typoheads:formhandler:0.9.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"818E5B56-23AF-4690-BD72-2AD94B6E4221\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:typoheads:formhandler:0.9.9:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8EF81164-A0CF-4BFC-A5EB-0AA96BEA7024\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:typoheads:formhandler:0.9.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DC782F92-D06C-4CEA-B672-F22FC50A0BB2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:typoheads:formhandler:0.9.11:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8C082526-5190-4354-A3CA-F1274FCAC57C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:typoheads:formhandler:0.9.12:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E1B52E1F-AC47-44F5-9E28-01152985E0EE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:typoheads:formhandler:0.9.13:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D369BE4A-1E59-4351-AF7D-671F241C549D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:typoheads:formhandler:0.9.14:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"14316BEE-551B-4B48-80D8-F94CA860CC2B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:typoheads:formhandler:0.9.15:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"260C0408-C199-4253-BF35-3D1E58C8F505\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:typoheads:formhandler:0.9.16:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"91D70754-7157-4BF6-AAD5-FB4618EDE3F1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:typoheads:formhandler:1.0.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D6E97CE6-95CA-4674-8B34-338FD0B602BD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:typoheads:formhandler:1.1.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"719681F1-843D-4235-B04E-DC0BAEEACE00\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:typoheads:formhandler:1.2.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"87DD96D4-EE8F-4F43-85FF-93D564BADF22\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:typoheads:formhandler:1.3.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1368E706-BA9A-46E5-B8C7-74428A7F118B\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:a:typo3:typo3:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E66C5ABA-7727-4562-A792-5E450098D520\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"SQL injection vulnerability in the Formhandler extension before 1.4.1 for TYPO3 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors.\"}, {\"lang\": \"es\", \"value\": \"Vulnerabilidad de inyecci\\u00f3n SQL en la extensi\\u00f3n Formhandler anterior a 1.4.1 para TYPO3, permite a usuarios autenticados remotamente con determinados permisos la ejecuci\\u00f3n de comandos SQL arbitrarios a trav\\u00e9s de vectores no especificados.\"}]",
"id": "CVE-2012-6577",
"lastModified": "2024-11-21T01:46:25.157",
"metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:S/C:P/I:P/A:P\", \"baseScore\": 6.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"SINGLE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 6.8, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2013-06-27T20:55:01.773",
"references": "[{\"url\": \"http://typo3.org/extensions/repository/view/formhandler\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-012/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/79670\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://typo3.org/extensions/repository/view/formhandler\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-012/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/79670\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-89\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2012-6577\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2013-06-27T20:55:01.773\",\"lastModified\":\"2024-11-21T01:46:25.157\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"SQL injection vulnerability in the Formhandler extension before 1.4.1 for TYPO3 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors.\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad de inyecci\u00f3n SQL en la extensi\u00f3n Formhandler anterior a 1.4.1 para TYPO3, permite a usuarios autenticados remotamente con determinados permisos la ejecuci\u00f3n de comandos SQL arbitrarios a trav\u00e9s de vectores no especificados.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:S/C:P/I:P/A:P\",\"baseScore\":6.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":6.8,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-89\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typoheads:formhandler:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.4.0\",\"matchCriteriaId\":\"76CCC153-4300-4432-8594-679C4616841B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typoheads:formhandler:0.9.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"600A1B78-85DA-4E95-9F5E-F18C1F0FC18F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typoheads:formhandler:0.9.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D0393982-19A0-402C-BA22-93F4B350894E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typoheads:formhandler:0.9.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7625E110-1051-4DE8-9B37-96124D1E7B1D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typoheads:formhandler:0.9.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"066424CE-B605-45E8-A70F-53FDC8842518\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typoheads:formhandler:0.9.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D68E43D-C6AB-4DA6-BAB5-1A29633F7CDF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typoheads:formhandler:0.9.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"818E5B56-23AF-4690-BD72-2AD94B6E4221\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typoheads:formhandler:0.9.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8EF81164-A0CF-4BFC-A5EB-0AA96BEA7024\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typoheads:formhandler:0.9.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DC782F92-D06C-4CEA-B672-F22FC50A0BB2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typoheads:formhandler:0.9.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8C082526-5190-4354-A3CA-F1274FCAC57C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typoheads:formhandler:0.9.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E1B52E1F-AC47-44F5-9E28-01152985E0EE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typoheads:formhandler:0.9.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D369BE4A-1E59-4351-AF7D-671F241C549D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typoheads:formhandler:0.9.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"14316BEE-551B-4B48-80D8-F94CA860CC2B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typoheads:formhandler:0.9.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"260C0408-C199-4253-BF35-3D1E58C8F505\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typoheads:formhandler:0.9.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"91D70754-7157-4BF6-AAD5-FB4618EDE3F1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typoheads:formhandler:1.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D6E97CE6-95CA-4674-8B34-338FD0B602BD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typoheads:formhandler:1.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"719681F1-843D-4235-B04E-DC0BAEEACE00\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typoheads:formhandler:1.2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"87DD96D4-EE8F-4F43-85FF-93D564BADF22\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typoheads:formhandler:1.3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1368E706-BA9A-46E5-B8C7-74428A7F118B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:a:typo3:typo3:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E66C5ABA-7727-4562-A792-5E450098D520\"}]}]}],\"references\":[{\"url\":\"http://typo3.org/extensions/repository/view/formhandler\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-012/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/79670\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://typo3.org/extensions/repository/view/formhandler\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-012/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/79670\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.