{"id":"GHSA-v4fw-fh5c-xvjg","aliases":["CVE-2013-4682"],"title":"Multishop extension for TYPO3 has SQL Injection vulnerability","description":"SQL injection vulnerability in the Multishop extension before 2.0.39 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.","severity":"high","score":null,"published":"2022-05-17T05:00:38.000Z","modified":"2025-04-12T03:57:07.296Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"bvbmedia/multishop","ranges":[{"events":[{"introduced":"0"},{"fixed":"2.0.39"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["2.0.39"]}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2013-4682","https://github.com/bvbmedia/multishop","https://web.archive.org/web/20130701223430/http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-009-1","https://web.archive.org/web/20200229092533/http://www.securityfocus.com/bid/60271","http://typo3.org/extensions/repository/view/multishop"],"sources":[{"name":"OSV","id":"GHSA-v4fw-fh5c-xvjg","modified":"2025-04-12T03:57:07.296896Z","url":"https://osv.dev/vulnerability/GHSA-v4fw-fh5c-xvjg"}],"assessments":[]}