Synced 30 Sept 2026 20:54 UTC Account
← All products

CVE-2009-4162

HIGH severity · CVSS 7.2
7.2CVSS HIGH

Summary

Unspecified vulnerability in the DB Integration (wfqbe) extension 1.3.1 and earlier for TYPO3 allows local users to execute arbitrary commands via unspecified vectors.

Impact & exploitability

Attack vectorLocal
Attack complexityLow
Privileges required—
User interaction—
Confidentiality impact—
Integrity impact—
Availability impact—
Exploit probability (EPSS)0%

AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected products we track (1)

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Official patch: http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017/ ↗