CVE-2009-4971: SQL Injection
Published Jul 27, 2010
·Updated
SQL injection vulnerability in the AJAX Chat (vjchat) extension before 0.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
6 affected components
Vincent Tietz Vjchat<=0.3.2
Vincent Tietz Vjchat=0.2.6
Vincent Tietz Vjchat=0.2.7
Vincent Tietz Vjchat=0.3.0
Vincent Tietz Vjchat=0.3.1
Typo3 TYPO3
Remediation
Patch Available
Event History
Jul 27, 2010
CVE Published
via MITRE·06:39 PM
Data Sourced
via MITRE·06:39 PM
Description
Jul 28, 2010
Data Sourced
02:43 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-4971?
CVE-2009-4971 is considered a high-severity SQL injection vulnerability that can allow attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2009-4971?
To fix CVE-2009-4971, update the AJAX Chat (vjchat) extension to version 0.3.3 or later.
3
Which versions of AJAX Chat are affected by CVE-2009-4971?
CVE-2009-4971 affects AJAX Chat versions 0.2.6, 0.2.7, 0.3.0, 0.3.1, and 0.3.2.
4
Can CVE-2009-4971 affect TYPO3 installations?
Yes, CVE-2009-4971 impacts the AJAX Chat extension that is compatible with TYPO3 versions prior to the fix.
5
What are the potential consequences of CVE-2009-4971?
Exploiting CVE-2009-4971 can lead to unauthorized access to database contents and manipulation of data.