Moole Vulnerability Database

Find real vulnerabilities before they ship

Unknown

CVE-2009-4803

SQL injection vulnerability in the Accessibility Glossary (a21glossary) extension 0.4.10 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

PublishedApr 23, 2010, 14:30

Published Bycve@mitre.org

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

svewap/a21glossary(Packagist)0N/AN/A

wapplersystems/a21glossary(Packagist)0N/AN/A

References

http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-003/
http://www.securityfocus.com/bid/33997

Weakness Type

CWE-89

CVSS Metrics

Base Score

7.5

Vector String

AV:N/AC:L/Au:N/C:P/I:P/A:P

Base SeverityUnknown

Version

2.0

Attack Vector (AV)