Unscored severity · published Dec 22, 2009
CVE-2009-4390
SQL injection vulnerability in the Car (car) extension 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors
–
CVSS
1%
EPSS
No
On KEV
Description
SQL injection vulnerability in the Car (car) extension 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 63% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CA
Car · Jochen Rieger
0.1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-4390
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-4390
Vendor Advisory
http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-020/
More from Car
–
CVE-2009-4967
SQL injection vulnerability in the Car (car) extension before 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors