First published: Mon Mar 15 2010(Updated: )
SQL injection vulnerability in the Reset backend password (cwt_resetbepassword) extension 1.20 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
robert heel cwt resetbepassword | <=1.20 | |
TYPO3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2009-4710 is classified as a medium severity vulnerability due to its potential to allow remote SQL injection attacks.
To fix CVE-2009-4710, update the cwt_resetbepassword extension to version 1.21 or later.
CVE-2009-4710 affects versions 1.20 and earlier of the cwt_resetbepassword extension for TYPO3.
Yes, CVE-2009-4710 can be exploited remotely, allowing attackers to execute arbitrary SQL commands.
The impact of CVE-2009-4710 on TYPO3 security includes the risk of unauthorized database access and data manipulation.