GHSA-mp9g-4rg9-8rcm

Accessibility Glossary (a21glossary) SQL injection vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2009-4803

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	svewap/a21glossary	<= 0.4.10	no fix listed
Packagist	wapplersystems/a21glossary	<= 0.4.10	no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

SQL injection vulnerability in the Accessibility Glossary (a21glossary) extension 0.4.10 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2009-4803 advisory
https://github.com/WapplerSystems/a21glossary package
https://web.archive.org/web/20090822085638/http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-003 web
https://web.archive.org/web/20200228204747/http://www.securityfocus.com/bid/33997 web