CVE-2009-4338: SQL Injection

Published Dec 17, 2009

Updated

SQL injection vulnerability in the Flash SlideShow (slideshow) extension 0.2.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

Affected Software

2 affected components

Typo3 TYPO3

Jean-david Gadina Slideshow=0.2.2

Event History

Dec 17, 2009

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Data Sourced

05:30 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

Who can exploit this issue?

The CVSS vector indicates it is remotely exploitable over the network, requires low attack complexity, and does not require authentication. An unauthenticated remote attacker may be able to exploit the SQL injection flaw.

What is the potential impact of successful exploitation?

Successful exploitation may allow execution of arbitrary SQL commands. The listed impact includes partial compromise of confidentiality, integrity, and availability.

Which component is identified as affected?

The affected component identified in the available data is the Flash SlideShow (slideshow) extension version 0.2.2 for TYPO3, associated with Jean-david Gadina Slideshow.

CVE-2009-4338: SQL Injection

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the potential impact of successful exploitation?

Which component is identified as affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the potential impact of successful exploitation?

Which component is identified as affected?