CVE-2009-4950: SQL Injection
Published Jul 22, 2010
·Updated
SQL injection vulnerability in the A21glossary Advanced Output (a21glossaryadvancedoutput) extension before 0.1.12 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
6 affected components
Tim Lochmueller \& Thomas Buss A21glossary Advanced Output<=0.1.10
Tim Lochmueller \& Thomas Buss A21glossary Advanced Output=0.1.6
Tim Lochmueller \& Thomas Buss A21glossary Advanced Output=0.1.7
Tim Lochmueller \& Thomas Buss A21glossary Advanced Output=0.1.8
Tim Lochmueller \& Thomas Buss A21glossary Advanced Output=0.1.9
Typo3 TYPO3
Remediation
Event History
Jul 22, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
06:30 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-4950?
CVE-2009-4950 is classified as a medium severity vulnerability due to its potential for remote SQL command execution.
2
How do I fix CVE-2009-4950?
To fix CVE-2009-4950, upgrade the A21glossary Advanced Output extension to version 0.1.12 or later.
3
What versions are affected by CVE-2009-4950?
CVE-2009-4950 affects A21glossary Advanced Output versions 0.1.6 through 0.1.10.
4
What is the impact of CVE-2009-4950?
The impact of CVE-2009-4950 allows attackers to execute arbitrary SQL commands on the target database.
5
Is TYPO3 itself affected by CVE-2009-4950?
No, the TYPO3 core is not affected by CVE-2009-4950, only the A21glossary Advanced Output extension is vulnerable.