Unscored severity · published Jul 28, 2010
CVE-2009-4967
SQL injection vulnerability in the Car (car) extension before 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors
–
CVSS
1.1%
EPSS
No
On KEV
Description
SQL injection vulnerability in the Car (car) extension before 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CA
Car · Jochen Rieger
through 0.1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-4967
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-4967
Patch
http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-013/
www.securityfocus.com
http://www.securityfocus.com/bid/36131
Patch
http://www.vupen.com/english/advisories/2009/2411
More from Car
–
CVE-2009-4390
SQL injection vulnerability in the Car (car) extension 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors