{"id":"GHSA-mp9g-4rg9-8rcm","aliases":["CVE-2009-4803"],"title":"Accessibility Glossary (a21glossary) SQL injection vulnerability","description":"SQL injection vulnerability in the Accessibility Glossary (a21glossary) extension 0.4.10 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.","severity":"high","score":8.9,"published":"2022-05-02T03:58:18.000Z","modified":"2025-04-11T20:27:15.706Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"svewap/a21glossary","ranges":[{"events":[{"introduced":"0"},{"last_affected":"0.4.10"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":[]},{"ecosystem":"Packagist","name":"wapplersystems/a21glossary","ranges":[{"events":[{"introduced":"0"},{"last_affected":"0.4.10"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":[]}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2009-4803","https://github.com/WapplerSystems/a21glossary","https://web.archive.org/web/20090822085638/http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-003","https://web.archive.org/web/20200228204747/http://www.securityfocus.com/bid/33997"],"sources":[{"name":"OSV","id":"GHSA-mp9g-4rg9-8rcm","modified":"2025-04-11T20:27:15.706480Z","url":"https://osv.dev/vulnerability/GHSA-mp9g-4rg9-8rcm"}],"assessments":[{"source":"OSV","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P","score":8.9}]}