Description
SQL injection vulnerability in the XDS Staff List (xds_staff) extension 0.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Unscored
CVE-2009-4392
EUVD-2009-4360GHSA-fmgf-2cqj-6q66
SQL injection vulnerability in the XDS Staff List (xds_staff) extension 0.0.3 and earlier for TYPO3 allows remote attackers to execute arbi…
Published Dec 22, 2009 · Updated Sep 16, 2024 · Assigned by mitre