Security Advisory
CVE-2012-6577
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in the Formhandler extension before 1.4.1 for TYPO3 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors.