CVE-2008-6459: SQL Injection
Published Mar 13, 2009
·Updated
SQL injection vulnerability in the auto BE User Registration (autobeuser) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
4 affected components
Typo3 autobeuser<=0.0.2
Typo3 TYPO3
All of the following
Typo3 autobeuser<=0.0.2
Typo3 TYPO3
Event History
Mar 13, 2009
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
10:30 AM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·10:30 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-6459?
CVE-2008-6459 has a high severity rating due to its ability to allow remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2008-6459?
To fix CVE-2008-6459, upgrade to a version of the auto BE User Registration extension later than 0.0.2.
3
What software is affected by CVE-2008-6459?
CVE-2008-6459 affects the auto BE User Registration extension for TYPO3 version 0.0.2 and earlier.
4
Can CVE-2008-6459 be exploited remotely?
Yes, CVE-2008-6459 can be exploited remotely by attackers to execute SQL commands.
5
What types of attacks can CVE-2008-6459 facilitate?
CVE-2008-6459 can facilitate SQL injection attacks, potentially compromising the application's database.