Lucene search
HistoryOct 03, 2022 - 4:24 p.m.
CVE-2009-4710
cve-2009-4710
sql injection
typo3
extension
security vulnerability
8.8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
51.4%
SQL injection vulnerability in the Reset backend password (cwt_resetbepassword) extension 1.20 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected configurations
Node
robert_heelcwt_resetbepasswordRange≤1.20
typo3typo3
| CPE | Name | Operator | Version |
|---|---|---|---|
| robert_heel:cwt_resetbepassword | robert heel cwt resetbepassword | le | 1.20 |
Related
prion
prion
Sql injection
2010-03-15 21:30:00
nvd
nvd
CVE-2009-4710
2010-03-15 21:30:01
cvelist
cvelist
CVE-2009-4710
2022-10-03 16:24:03
8.8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
51.4%
Related for CVE-2009-4710