CVE-2009-4166

https://notcve.org/view.php?id=CVE-2009-4166

SQL injection vulnerability in the Trips (mchtrips) extension 2.0.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Vulnerabilidad de inyección SQL en la extensión Trips (mchtrips) v2.0.0 para TYPO3 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de vectores inespecíficos. • http://typo3.org/extensions/repository/view/mchtrips/2.0.1 http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •