Unscored severity · published Dec 2, 2009
CVE-2009-4162
Unspecified vulnerability in the DB Integration (wfqbe) extension 1.3.1 and earlier for TYPO3 allows local users to execute arbitrary commands via unspecified vectors
–
CVSS
0.3%
EPSS
No
On KEV
Description
Unspecified vulnerability in the DB Integration (wfqbe) extension 1.3.1 and earlier for TYPO3 allows local users to execute arbitrary commands via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WF
Wfqbe · Mauro Lorenzutti
1.3.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-4162
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-4162
Vendor Advisory
http://secunia.com/advisories/37551
Patch
http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/
More from Wfqbe
–
CVE-2013-5310
SQL injection vulnerability in the DB Integration (wfqbe) extension before 2.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors