First published: Tue Dec 22 2009(Updated: )
SQL injection vulnerability in the Document Directorys (danp_documentdirs) extension 1.10.7 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
daniel ptzinger danp documentdirs | <=1.10.7 | |
TYPO3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2009-4393 has a high severity due to its capability to allow remote attackers to execute arbitrary SQL commands.
To fix CVE-2009-4393, update the Document Directorys extension to version 1.10.8 or later.
CVE-2009-4393 affects Document Directorys extension version 1.10.7 and earlier.
Yes, CVE-2009-4393 can be exploited remotely by attackers to execute SQL commands.
CVE-2009-4393 impacts the Document Directorys extension for TYPO3, specifically versions up to 1.10.7.