CVE-2009-4390: SQL Injection
Published Dec 22, 2009
·Updated
SQL injection vulnerability in the Car (car) extension 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
2 affected components
Jochen Rieger Car=0.1.1
Typo3 TYPO3
Event History
Dec 22, 2009
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Data Sourced
11:30 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-4390?
CVE-2009-4390 is classified as a critical SQL injection vulnerability that can lead to remote code execution.
2
How do I fix CVE-2009-4390?
To fix CVE-2009-4390, upgrade the Car extension to a version that addresses the SQL injection issue.
3
What software is affected by CVE-2009-4390?
CVE-2009-4390 specifically affects the Car extension version 0.1.1 for TYPO3.
4
Can CVE-2009-4390 be exploited remotely?
Yes, CVE-2009-4390 can be exploited remotely by attackers to execute arbitrary SQL commands.
5
What should I do if I am using an affected version related to CVE-2009-4390?
If you are using an affected version, immediately apply security patches or update to a secure version of the Car extension.