VULNERABILITY INTELLIGENCE

CVE-2015-4613

CVSS score6.5 MEDIUM
EPSS probability0.86%
CISA KEVNot currently listed
Published2015-06-16
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:P

Description

SQL injection vulnerability in the backend module in the Developer Log (devlog) extension before 2.11.4 for TYPO3 allows remote editors to execute arbitrary SQL commands via unspecified vectors.

Weakness classification

  • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Primary references