← Database

CVE-2008-2489

HIGH CVSS: 7.5 Published: 2008-05-28 Modified: 2026-06-16

Description

SQL injection vulnerability in the Library for Frontend Plugins (aka sg_zfelib) extension 1.1.512 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified "user input."

Affected Platforms

Typo3 Sg Zfelib

Weakness Type

CWE-89

References