GHSA-9568-hcj9-rf7v

Webkit PDFs for TYPO3 has SQL Injection vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2010-4961

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	dmk/webkitpdf	< 1.1.4	1.1.4

Details

As written in the advisory (Markdown source, shown as plain text).

SQL injection vulnerability in the Webkit PDFs (webkitpdf) extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2010-4961 advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/61059 web
https://github.com/DMKEBUSINESSGMBH/webkitpdf package
https://web.archive.org/web/20101218181134/http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015 web
https://web.archive.org/web/20111015170040/http://www.securityfocus.com/bid/42381 web
http://typo3.org/extensions/repository/view/webkitpdf/1.1.4 web