QwikSec

Security Database

CVE

CWE

Training

CVE-2009-3632

Published: Nov 2, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

SQL injection vulnerability in the traditional frontend editing feature in the Frontend Editing subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to execute arbitrary SQL commands via unspecified parameters.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

typo3-editing-sql-injection(53924)

vdb-entry

x_refsource_XF

http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/

x_refsource_CONFIRM

third-party-advisory

x_refsource_SECUNIA

[oss-security] 20091023 Re: CVE id request: typo3

mailing-list

x_refsource_MLIST

vdb-entry

x_refsource_VUPEN

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.