CVE-2014-6293: Kennziffer Statistics

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

SQL injection vulnerability in the Statistics (ke_stats) extension before 1.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild in February 2014.

Affected products

• Kennziffer Statistics: up to and including 1.1.1

Published 2014-10-03. Last modified 2026-06-17.