Typo3 · Typo3 · CVE-2015-10106
**Name of the Vulnerable Software and Affected Versions**
mback2k mh httpbl Extension versions 1.1.7 and earlier
**Description**
A critical vulnerability was found in the mback2k mh httpbl Extension on TYPO3, affecting the function `moduleContent` of the file `mod1/index.php`. This issue leads to SQL injection and can be initiated remotely.
**Recommendations**
For versions 1.1.7 and earlier, upgrade to version 1.1.8 to address this issue. As a temporary workaround, consider restricting access to the `moduleContent` function in the `mod1/index.php` file until the upgrade is applied.