CVE:CVE-2009-4702
CNNVD:CNNVD-201003-162
Typo3是开源内容管理系统（CMS）和内容管理框架（CMF）。
TYPO3的扩展件Tour Extension (pm_tour)存在SQL注入漏洞。远程攻击者可以借助未明向量，执行任意的SQL命令。
solution:Upgrade markus_barchfeld pm_tour to a higher version than 0.0.12,0.0.7,0.0.8,0.0.10,0.0.11,and avoid the version (,0.0.12],0.0.7,0.0.8,0.0.10,0.0.11