Unscored severity · published Feb 14, 2012
CVE-2012-1071
SQL injection vulnerability in the Kitchen recipe (mv_cooking) extension before 0.4.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors,…
–
CVSS
1.3%
EPSS
No
On KEV
Description
SQL injection vulnerability in the Kitchen recipe (mv_cooking) extension before 0.4.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild as of February 2012.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MC
MV Cooking · Mathieu Vidal
0.1.0; 0.3.0; 0.4.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-1071
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-1071
osvdb.org
http://osvdb.org/78748
Vendor Advisory
http://secunia.com/advisories/47437
typo3.org
http://typo3.org/extensions/repository/view/mv_cooking/0.4.1/
Vendor Advisory
http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-001/
www.securityfocus.com
http://www.securityfocus.com/bid/51825
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/72934