CVE-2009-4967: SQL Injection
Published Jul 27, 2010
·Updated
SQL injection vulnerability in the Car (car) extension before 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
2 affected components
Jochen Rieger Car<=0.1.0
Typo3 TYPO3
Remediation
Patch Available
Event History
Jul 27, 2010
CVE Published
via MITRE·06:39 PM
Data Sourced
via MITRE·06:39 PM
Description
Jul 28, 2010
Data Sourced
02:43 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-4967?
CVE-2009-4967 is classified as a medium-severity SQL injection vulnerability.
2
How do I fix CVE-2009-4967?
To fix CVE-2009-4967, update the Car extension to version 0.1.1 or later.
3
Who is affected by CVE-2009-4967?
Users of the Car extension for TYPO3 versions prior to 0.1.1 are affected by CVE-2009-4967.
4
What type of attack can be conducted using CVE-2009-4967?
CVE-2009-4967 allows remote attackers to execute arbitrary SQL commands, potentially leading to data exposure or manipulation.
5
Is there a way to test for CVE-2009-4967?
Testing for CVE-2009-4967 typically involves attempting SQL injection payloads on inputs that interact with the Car extension.