CVE-2009-4855

2010-05-1112:02:08

CWE-89

web.nvd.nist.gov

cve-2009-4855

sql injection

index.php

typo3 4.0

remote attackers

showuid parameter

security vulnerability

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

27.6%

CPENameOperatorVersion
typo3:typo3typo3eq4.0

CPE	Name	Operator	Version
typo3:typo3	typo3	eq	4.0

References

secure.t3sec.info/blog/post/2009/08/06/typo3-cms-40-showuid-exploit-not-a-vulnerability/

www.exploit-db.com/exploits/9380

www.securityfocus.com/bid/35975

exchange.xforce.ibmcloud.com/vulnerabilities/52308