Unscored severity · published Dec 31, 2008
CVE-2008-5797
SQL injection vulnerability in the advCalendar extension 0.3.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors
–
CVSS
1.1%
EPSS
No
On KEV
Description
SQL injection vulnerability in the advCalendar extension 0.3.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AE
Advcalendar Extension · Typo3
through 0.3.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-5797
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-5797
Vendor Advisory
http://typo3.org/teams/security/security-bulletins/typo3-20081110-2/
www.securityfocus.com
http://www.securityfocus.com/bid/32230
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/46469