CVE-2009-4802: SQL Injection
Published Apr 23, 2010
·Updated
SQL injection vulnerability in the Flat Manager (flatmgr) extension before 1.9.16 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
48 affected components
Joachim Ruhs Flat Manager<=1.9.15
Joachim Ruhs Flat Manager=1.4.0
Joachim Ruhs Flat Manager=1.5.0
Joachim Ruhs Flat Manager=1.6.0
Joachim Ruhs Flat Manager=1.6.2
Joachim Ruhs Flat Manager=1.7.0
Joachim Ruhs Flat Manager=1.7.1
Joachim Ruhs Flat Manager=1.7.2
Joachim Ruhs Flat Manager=1.8.0
Joachim Ruhs Flat Manager=1.8.6
Joachim Ruhs Flat Manager=1.8.8
Joachim Ruhs Flat Manager=1.8.9
Joachim Ruhs Flat Manager=1.9.0
Joachim Ruhs Flat Manager=1.9.1
Joachim Ruhs Flat Manager=1.9.2
Joachim Ruhs Flat Manager=1.9.3
Joachim Ruhs Flat Manager=1.9.4
Joachim Ruhs Flat Manager=1.9.7
Joachim Ruhs Flat Manager=1.9.8
Joachim Ruhs Flat Manager=1.9.9
Joachim Ruhs Flat Manager=1.9.10
Joachim Ruhs Flat Manager=1.9.12
Joachim Ruhs Flat Manager=1.9.14
Typo3 TYPO3
All of the following
Any of the following
Joachim Ruhs Flat Manager<=1.9.15
Joachim Ruhs Flat Manager=1.4.0
Joachim Ruhs Flat Manager=1.5.0
Joachim Ruhs Flat Manager=1.6.0
Joachim Ruhs Flat Manager=1.6.2
Joachim Ruhs Flat Manager=1.7.0
Joachim Ruhs Flat Manager=1.7.1
Joachim Ruhs Flat Manager=1.7.2
Joachim Ruhs Flat Manager=1.8.0
Joachim Ruhs Flat Manager=1.8.6
Joachim Ruhs Flat Manager=1.8.8
Joachim Ruhs Flat Manager=1.8.9
Joachim Ruhs Flat Manager=1.9.0
Joachim Ruhs Flat Manager=1.9.1
Joachim Ruhs Flat Manager=1.9.2
Joachim Ruhs Flat Manager=1.9.3
Joachim Ruhs Flat Manager=1.9.4
Joachim Ruhs Flat Manager=1.9.7
Joachim Ruhs Flat Manager=1.9.8
Joachim Ruhs Flat Manager=1.9.9
Joachim Ruhs Flat Manager=1.9.10
Joachim Ruhs Flat Manager=1.9.12
Joachim Ruhs Flat Manager=1.9.14
Typo3 TYPO3
Remediation
Patch Available
Event History
Apr 23, 2010
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
02:30 PM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·02:30 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-4802?
CVE-2009-4802 has a high severity rating due to the ability of remote attackers to exploit SQL injection vulnerabilities.
2
How do I fix CVE-2009-4802?
To fix CVE-2009-4802, upgrade the Flat Manager extension to version 1.9.16 or later.
3
Which versions are affected by CVE-2009-4802?
CVE-2009-4802 affects Flat Manager versions prior to 1.9.16, including all releases from 1.4.0 to 1.9.15.
4
What can attackers do with CVE-2009-4802?
Attackers can execute arbitrary SQL commands, potentially compromising the database and accessing sensitive data.
5
Is TYPO3 itself vulnerable in relation to CVE-2009-4802?
No, TYPO3 itself is not vulnerable; only the affected versions of the Flat Manager extension are impacted.