CVE-2008-6696

SQL injection vulnerability in Fussballtippspiel (toto) 0.1.1 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

Date published : 2009-04-10

http://www.securityfocus.com/bid/29824

http://typo3.org/extensions/repository/view/toto/0.1.2/