[Typo3] SQL Injection

[Ries van Twisk]

Bernard,

I am not a member of that list... nor that I even knew (forgot...) that 
it existed,
But in any case... I didn't wrote down how.

sorry for the post on this list anyways,
Ries


> Ries van Twisk wrote:
>
>> I just tested it and it's indeed possible to do a  sql injection,
>
>
> All after all this notice should have gone to the security mailinglist
> at typo3-project-security at lists.netfielders.de
>
> It is not good to have such things public ...
>
>
> greets,
> Bernhard



-- 
R. van Twisk
http://www.metamorf.net

Our Typo3 enabled website: http://www.livetravelguides.com
Instand help for Typo3?    irc:/irc.freenode.net/typo3
Looking for documentation? http://typo3.org/documentation/