high8.9
CVE-2009-4803
Accessibility Glossary (a21glossary) SQL injection vulnerability
Impact
SQL injection vulnerability in the Accessibility Glossary (a21glossary) extension 0.4.10 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | svewap/a21glossary | <= 0.4.10 | none recorded |
| composer | wapplersystems/a21glossary | <= 0.4.10 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Andreas Schwarzkopf | Accessibility Glossary | through 0.4.10 Versions 0.4.0, 0.4.7, 0.4.8, 0.4.9 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-003/
- http://www.securityfocus.com/bid/33997
- https://github.com/advisories/GHSA-mp9g-4rg9-8rcm
- https://nvd.nist.gov/vuln/detail/CVE-2009-4803
- https://web.archive.org/web/20090822085638/http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-003
- https://web.archive.org/web/20200228204747/http://www.securityfocus.com/bid/33997