cpe:/a:typo3:tu-clausthal_staff:0.0.1 cpe:/a:typo3:tu-clausthal_staff:0.1.0 cpe:/a:typo3:tu-clausthal_staff:0.1.1 cpe:/a:typo3:tu-clausthal_staff:0.2.0 cpe:/a:typo3:tu-clausthal_staff:0.3.0 CVE-2008-6344 2009-02-27T12:30:09.797-05:00 2009-03-02T00:00:00.000-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2009-03-02T09:48:00.000-05:00 ALLOWS_OTHER_ACCESS BID 32981 CONFIRM http://typo3.org/teams/security/security-bulletins/typo3-20081222-4 SQL injection vulnerability in the TU-Clausthal Staff (tuc_staff) 0.3.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.