CVE:CVE-2009-4158
CNNVD:CNNVD-200912-025
TYPO3是一个专业级的网站开发与管理系统,以 PHP/MySQL为发展工具。TYPO3的 before 1.2.1版本之前的Calendar Base (cal) extension中存在SQL注入漏洞，远程攻击者可以借助未明向量执行任意SQL命令。
solution:Upgrade mario_matzulla cal to a higher version than 1.2.0,0.9.0,0.10.0,0.11.0,0.12.0,0.12.1,0.13.0,0.13.1,0.14.0,0.14.1,0.15.0,0.15.1,0.15.2,0.15.3,0.15.4,0.15.5,0.16.0,0.16.1,0.16.2,0.16.3,0.16.4,0.16.5,0.16.6,0.17.0,0.17.1,0.17.2,0.17.3,1.0.0,1.1.0,and avoid the version (,1.2.0],0.9.0,0.10.0,0.11.0,0.12.0,0.12.1,0.13.0,0.13.1,0.14.0,0.14.1,0.15.0,0.15.1,0.15.2,0.15.3,0.15.4,0.15.5,0.16.0,0.16.1,0.16.2,0.16.3,0.16.4,0.16.5,0.16.6,0.17.0,0.17.1,0.17.2,0.17.3,1.0.0,1.1.0