CVE-2009-4969: SQL Injection

Published Jul 27, 2010

Updated

SQL injection vulnerability in the Solidbase Bannermanagement (SBbanner) extension 1.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected Software

2 affected components

Typo3 Sbanner=1.0.1

Typo3 TYPO3

Event History

Jul 27, 2010

CVE Published

via MITRE·06:39 PM

Data Sourced

via MITRE·06:39 PM

Description

Jul 28, 2010

Data Sourced

02:43 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2009-4969?

CVE-2009-4969 is classified as a critical vulnerability due to its potential for allowing remote attackers to execute arbitrary SQL commands.

How do I fix CVE-2009-4969?

To fix CVE-2009-4969, upgrade the Solidbase Bannermanagement extension to a version that has addressed this SQL injection vulnerability.

Which software versions are affected by CVE-2009-4969?

CVE-2009-4969 specifically affects version 1.0.1 of the Solidbase Bannermanagement extension for TYPO3.

What type of vulnerability is CVE-2009-4969?

CVE-2009-4969 is an SQL injection vulnerability that enables attackers to manipulate SQL queries executed by the application.

Is TYPO3 itself vulnerable due to CVE-2009-4969?

No, TYPO3 itself is not vulnerable; only the Solidbase Bannermanagement extension version 1.0.1 is affected.