CVE-2009-4955: SQL Injection
Published Jul 22, 2010
·Updated
SQL injection vulnerability in the ultraCards (thultracards) extension before 0.5.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
6 affected components
Thomas Hempel Th Ultracards<=0.5.0
Thomas Hempel Th Ultracards=0.3.0
Thomas Hempel Th Ultracards=0.4.0
Thomas Hempel Th Ultracards=0.4.1
Thomas Hempel Th Ultracards=0.4.2
Typo3 TYPO3
Remediation
Event History
Jul 22, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
06:30 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-4955?
CVE-2009-4955 is classified as a high-severity vulnerability due to its potential to allow remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2009-4955?
To fix CVE-2009-4955, you should upgrade the TH UltraCards extension to version 0.5.1 or later.
3
Which versions of TH UltraCards are affected by CVE-2009-4955?
CVE-2009-4955 affects TH UltraCards versions 0.3.0 through 0.5.0.
4
What type of attack does CVE-2009-4955 enable?
CVE-2009-4955 enables SQL injection attacks, allowing attackers to manipulate database queries.
5
Is TYPO3 itself vulnerable due to CVE-2009-4955?
No, TYPO3 itself is not vulnerable; the issue lies specifically within the TH UltraCards extension.