CVE-2009-4955

The CVE-2009-4955 issue is a SQL injection vulnerability in the ultraCards (th_ultracards) TYPO3 extension, affected before version 0.5.1. The underlying flaw permits remote attackers to execute arbitrary SQL commands via unspecified vectors. A fixed release is 0.5.1; applying that version (or pa...

CVE-2009-4955: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the ultraCards thultracards extension before 0.5.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...