Description

SQL injection vulnerability in the traditional frontend editing feature in the Frontend Editing subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to execute arbitrary SQL commands via unspecified parameters.

Remediation

References

CVE-2009-3632

Related Vulnerabilities

WordPress Plugin Duplicate Theme Unspecified Vulnerability (0.1.4)

MySQL CVE-2020-2928 Vulnerability (CVE-2020-2928)

OpenSSL Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2015-3216)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-0207)

Drupal Other Vulnerability (CVE-2016-3167)

Severity

Medium

Classification

CVE-2009-3632 CWE-138

Tags

Missing Update Known Vulnerabilities