Files
CVEs-PoC/2008/CVE-2008-4904.md
T
2025-09-29 21:09:30 +02:00

710 B

CVE-2008-4904

Description

SQL injection vulnerability in the "Manage pages" feature (admin/pages) in Typo 5.1.3 and earlier allows remote authenticated users with "blog publisher" rights to execute arbitrary SQL commands via the search[published_at] parameter.

POC

Reference

Github

No PoCs found on GitHub currently.