CVE-2009-4708

SQL injection vulnerability in the Gobernalia Front End News Submitter gbfenewssubmit extension 0.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-4708

The CVE-2009-4708 entry concerns a SQL injection vulnerability in the Gobernalia Front End News Submitter (gb_fenewssubmit) TYPO3 extension, affected up to version 0.1.0. The root cause is an injectable SQL path via unspecified vectors, allowing remote attackers to execute arbitrary SQL commands....