CVE:CVE-2008-5609
CNNVD:CNNVD-200812-309
TYPO3 Commerce extension 是一款在线网店系统。
TYPO3 Commerce extension 0.9.6及其早期版本中存在SQL注入漏洞。远程攻击者可以借助未知向量，执行任意SQL指令。
solution:Upgrade typo3 commerce_extension to a higher version than 0.9.6,0.8.32,0.8.35,0.9.0,0.9.5,and avoid the version (,0.9.6],0.8.32,0.8.35,0.9.0,0.9.5