CVE-2009-4966: SQL Injection
Published Jul 27, 2010
·Updated
SQL injection vulnerability in the AST ZipCodeSearch (astaddresszipsearch) extension 0.5.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
2 affected components
Elemente Ast Addresszipsearch=0.5.4
Typo3 TYPO3
Event History
Jul 27, 2010
CVE Published
via MITRE·06:39 PM
Data Sourced
via MITRE·06:39 PM
Description
Jul 28, 2010
Data Sourced
02:43 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-4966?
CVE-2009-4966 is classified as a high severity vulnerability due to its potential for remote code execution through SQL injection.
2
How do I fix CVE-2009-4966?
To fix CVE-2009-4966, update the AST ZipCodeSearch extension to a version that addresses the SQL injection vulnerability.
3
What software is affected by CVE-2009-4966?
CVE-2009-4966 affects the AST ZipCodeSearch extension version 0.5.4 for TYPO3.
4
Can CVE-2009-4966 lead to data breaches?
Yes, CVE-2009-4966 can lead to data breaches as an attacker could execute arbitrary SQL commands.
5
Are there any workarounds for CVE-2009-4966?
There are no recommended workarounds for CVE-2009-4966, so updating the software is essential to mitigate the risk.