CVE-2009-4949: SQL Injection
Published Jul 22, 2010
·Updated
SQL injection vulnerability in the Store Locator extension before 1.2.8 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
6 affected components
Joachim Ruhs Locator<=1.2.6
Joachim Ruhs Locator=1.0.6
Joachim Ruhs Locator=1.0.7
Joachim Ruhs Locator=1.1.0
Joachim Ruhs Locator=1.1.8
Typo3 TYPO3
Remediation
Patch Available
Event History
Jul 22, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
06:30 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-4949?
CVE-2009-4949 is classified as a medium severity vulnerability due to its potential for remote SQL command execution.
2
How do I fix CVE-2009-4949?
To fix CVE-2009-4949, upgrade the Store Locator extension to version 1.2.8 or later.
3
Which versions of the Store Locator are affected by CVE-2009-4949?
CVE-2009-4949 affects Store Locator versions up to 1.2.6, including versions 1.0.6, 1.0.7, 1.1.0, and 1.1.8.
4
What type of vulnerability is CVE-2009-4949?
CVE-2009-4949 is a SQL injection vulnerability that allows attackers to execute arbitrary SQL commands.
5
Can TYPO3 installations be affected by CVE-2009-4949?
No, TYPO3 itself is not vulnerable to CVE-2009-4949; the issue lies solely within the Store Locator extension.