Description

SQL injection vulnerability in the traditional frontend editing feature in the Frontend Editing subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to execute arbitrary SQL commands via unspecified parameters.

Remediation

References

CVE-2009-3632

Related Vulnerabilities

WordPress Plugin Popup, Optin Form & Email Newsletters for Mailchimp, HubSpot, Aweber-MailOptin Security Bypass (1.2.35.1)

WordPress Plugin underConstruction Cross-Site Scripting (1.18)

WordPress Plugin wpCentral Security Bypass (1.4.7)

PHP Other Vulnerability (CVE-2007-4507)

WordPress Plugin Forget About Shortcode Buttons Cross-Site Scripting (1.1.1)

Severity

Medium

Classification

CVE-2009-3632 CWE-138

Tags

Missing Update Known Vulnerabilities