GitHub Advisoryadvisory · Packagist
GHSA-v4fw-fh5c-xvjg Multishop extension for TYPO3 has SQL Injection vulnerability
HIGH
Official page ↗
- Aliases
- CVE-2013-4682
- Ecosystem
- Packagist
- Packages
- bvbmedia/multishop
- Severity
- High
- Weaknesses
- CWE-89
- Reviewed
- 2025-04-12
Affected packages
• Packagist bvbmedia/multishop: < 2.0.39 → fixed in 2.0.39
Description
SQL injection vulnerability in the Multishop extension before 2.0.39 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Related
Alias · CVE (1)
- CVE-2013-4682 SQL injection vulnerability in the Multishop extension before 2.0.39 for TYPO3 allows remote attackers to execute arbitrary SQL commands… vulnerability
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2013-4682 advisory
- https://github.com/bvbmedia/multishop package
- https://web.archive.org/web/20130701223430/http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-009-1 web
- https://web.archive.org/web/20200229092533/http://www.securityfocus.com/bid/60271 web
- http://typo3.org/extensions/repository/view/multishop web