CVE-2009-4855 Information

Description

LICENSE README.md cvefilelist cvelist nvdcve nvdpages.sh scripts test-CVE-2017-1882.markdown test-CVE-2017-18822.markdown tmpvendorlinks DISPUTED LICENSE README.md cvefilelist cvelist nvdcve nvdpages.sh scripts test-CVE-2017-1882.markdown test-CVE-2017-18822.markdown tmpvendorlinks SQL injection vulnerability in index.php in TYPO3 4.0 allows remote attackers to execute arbitrary SQL commands via the showUid parameter. NOTE: the TYPO3 Security Team disputes this report stating that \there is no such vulnerability… The showUid parameter is generally used in third-party TYPO3 extensions - not in TYPO3 Core.\

Reference

http://secure.t3sec.info/blog/post/2009/08/06/typo3-cms-40-showuid-exploit-not-a-vulnerability/ http://www.exploit-db.com/exploits/9380 http://www.securityfocus.com/bid/35975 https://exchange.xforce.ibmcloud.com/vulnerabilities/52308