CVE

Id
42290  
CVE No.
CVE-2009-4855  
Status
Candidate  
Description
** DISPUTED ** SQL injection vulnerability in index.php in TYPO3 4.0 allows remote attackers to execute arbitrary SQL commands via the showUid parameter. NOTE: the TYPO3 Security Team disputes this report, stating that "there is no such vulnerability... The showUid parameter is generally used in third-party TYPO3 extensions - not in TYPO3 Core."  
Phase
Assigned (20100510)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
462051 42290 CVE-2009-4855 MILW0RM:9380  View
462052 42290 CVE-2009-4855 URL:http://www.milw0rm.com/exploits/9380  View
462053 42290 CVE-2009-4855 MISC:http://secure.t3sec.info/blog/post/2009/08/06/typo3-cms-40-showuid-exploit-not-a-vulnerability/  View
462054 42290 CVE-2009-4855 BID:35975  View
462055 42290 CVE-2009-4855 URL:http://www.securityfocus.com/bid/35975  View
462056 42290 CVE-2009-4855 XF:typo3-showuid-sql-injection(52308)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38617 JVNDB-2010-004402 OWOS Lite Edition におけるクロスサイトスクリプティングの脆弱性 Online Work Order Suite (OWOS) Lite Edition には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-4859 42290 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004402.html  View