CVE-2009-4968: SQL Injection
Published Jul 27, 2010
·Updated
SQL injection vulnerability in the Event Registration (eventregistr) extension 1.0.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
2 affected components
Christian Ehmann Event Registr<=1.0.0
Typo3 TYPO3
Event History
Jul 27, 2010
CVE Published
via MITRE·06:39 PM
Data Sourced
via MITRE·06:39 PM
Description
Jul 28, 2010
Data Sourced
02:43 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-4968?
CVE-2009-4968 is classified as a medium severity SQL injection vulnerability.
2
How do I fix CVE-2009-4968?
To mitigate CVE-2009-4968, upgrade the Event Registration extension to version 1.0.1 or later.
3
What versions are affected by CVE-2009-4968?
CVE-2009-4968 affects Event Registration extension versions 1.0.0 and earlier.
4
Can CVE-2009-4968 allow remote code execution?
Yes, CVE-2009-4968 can allow remote attackers to execute arbitrary SQL commands.
5
What is the nature of the attack vector for CVE-2009-4968?
CVE-2009-4968 can be exploited through unspecified vectors that enable SQL injection.