{"api_version":"1","generated_at":"2026-07-23T05:42:50+00:00","cve":"CVE-2009-4158","urls":{"html":"https://cve.report/CVE-2009-4158","api":"https://cve.report/api/cve/CVE-2009-4158.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2009-4158","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2009-4158"},"summary":{"title":"CVE-2009-4158","description":"SQL injection vulnerability in the Calendar Base (cal) extension before 1.2.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.","state":"PUBLISHED","assigner":"mitre","published_at":"2009-12-02 17:30:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-89","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://secunia.com/advisories/37549","name":"http://secunia.com/advisories/37549","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"TYPO3 Calendar Base Extension SQL Injection Vulnerability - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://typo3.org/extensions/repository/view/cal/1.2.1/","name":"http://typo3.org/extensions/repository/view/cal/1.2.1/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"Page not found","mime":"text/html","httpstatus":"404","archivestatus":"404"},{"url":"http://www.securityfocus.com/bid/37164","name":"http://www.securityfocus.com/bid/37164","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"TYPO3 Calendar Base Extension Unspecified SQL Injection Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-019/","name":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-019/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"typo3.org: TYPO3 Security Bulletin TYPO3-SA-2009-019: Blind SQL Injection vulnerability in extension Calendar Base (cal)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-4158","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-4158","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2009","cve_id":"4158","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mario_matzulla","cpe5":"cal","cpe6":"0.10.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4158","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mario_matzulla","cpe5":"cal","cpe6":"0.11.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4158","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mario_matzulla","cpe5":"cal","cpe6":"0.12.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4158","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mario_matzulla","cpe5":"cal","cpe6":"0.12.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4158","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mario_matzulla","cpe5":"cal","cpe6":"0.13.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4158","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mario_matzulla","cpe5":"cal","cpe6":"0.13.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4158","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mario_matzulla","cpe5":"cal","cpe6":"0.14.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4158","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mario_matzulla","cpe5":"cal","cpe6":"0.14.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4158","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mario_matzulla","cpe5":"cal","cpe6":"0.15.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4158","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mario_matzulla","cpe5":"cal","cpe6":"0.15.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4158","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mario_matzulla","cpe5":"cal","cpe6":"0.15.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4158","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mario_matzulla","cpe5":"cal","cpe6":"0.15.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4158","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mario_matzulla","cpe5":"cal","cpe6":"0.15.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4158","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mario_matzulla","cpe5":"cal","cpe6":"0.15.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4158","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mario_matzulla","cpe5":"cal","cpe6":"0.16.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4158","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mario_matzulla","cpe5":"cal","cpe6":"0.16.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4158","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mario_matzulla","cpe5":"cal","cpe6":"0.16.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4158","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mario_matzulla","cpe5":"cal","cpe6":"0.16.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4158","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mario_matzulla","cpe5":"cal","cpe6":"0.16.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4158","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mario_matzulla","cpe5":"cal","cpe6":"0.16.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4158","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mario_matzulla","cpe5":"cal","cpe6":"0.16.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4158","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mario_matzulla","cpe5":"cal","cpe6":"0.17.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4158","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mario_matzulla","cpe5":"cal","cpe6":"0.17.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4158","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mario_matzulla","cpe5":"cal","cpe6":"0.17.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4158","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mario_matzulla","cpe5":"cal","cpe6":"0.17.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4158","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mario_matzulla","cpe5":"cal","cpe6":"0.9.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4158","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mario_matzulla","cpe5":"cal","cpe6":"1.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4158","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mario_matzulla","cpe5":"cal","cpe6":"1.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4158","vulnerable":"1","versionEndIncluding":"1.2.0","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mario_matzulla","cpe5":"cal","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"4158","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"typo3","cpe5":"typo3","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T06:54:09.515Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://typo3.org/extensions/repository/view/cal/1.2.1/"},{"name":"37549","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/37549"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-019/"},{"name":"37164","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/37164"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Calendar Base (cal) extension before 1.2.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2009-12-02T17:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://typo3.org/extensions/repository/view/cal/1.2.1/"},{"name":"37549","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/37549"},{"tags":["x_refsource_CONFIRM"],"url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-019/"},{"name":"37164","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/37164"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2009-4158","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"SQL injection vulnerability in the Calendar Base (cal) extension before 1.2.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://typo3.org/extensions/repository/view/cal/1.2.1/","refsource":"CONFIRM","url":"http://typo3.org/extensions/repository/view/cal/1.2.1/"},{"name":"37549","refsource":"SECUNIA","url":"http://secunia.com/advisories/37549"},{"name":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-019/","refsource":"CONFIRM","url":"http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-019/"},{"name":"37164","refsource":"BID","url":"http://www.securityfocus.com/bid/37164"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2009-4158","datePublished":"2009-12-02T17:00:00.000Z","dateReserved":"2009-12-02T00:00:00.000Z","dateUpdated":"2024-09-16T17:08:25.696Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2009-12-02 17:30:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-89","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","matchCriteriaId":"5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.0","matchCriteriaId":"4CB5E96D-C4B9-44E9-8073-DDBD4A8B88DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"E4065A72-7533-4D8E-ACF9-5604706CB208"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"DB64C964-7C36-4F3C-9AF8-BD334E413A1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.11.0:*:*:*:*:*:*:*","matchCriteriaId":"DADC4C4B-FB4A-4BA1-B927-EBE80D83F728"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.12.0:*:*:*:*:*:*:*","matchCriteriaId":"6438AC43-A012-49A3-957D-1507233683CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.12.1:*:*:*:*:*:*:*","matchCriteriaId":"C62589A9-8178-4B77-8DC3-251980AF6C93"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.13.0:*:*:*:*:*:*:*","matchCriteriaId":"0D9D28D1-7B3B-4379-805A-5C639CD0131C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.13.1:*:*:*:*:*:*:*","matchCriteriaId":"FC61BC22-0861-4487-8207-31D82446D4BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.14.0:*:*:*:*:*:*:*","matchCriteriaId":"45E04442-9642-4EE7-A176-CB5CF9872423"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.14.1:*:*:*:*:*:*:*","matchCriteriaId":"0C2318FB-9E09-499B-8B52-E88B4C6B5858"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.15.0:*:*:*:*:*:*:*","matchCriteriaId":"AA60C05C-5A2C-487D-9452-0C1DB3D40033"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.15.1:*:*:*:*:*:*:*","matchCriteriaId":"84B10B5C-7344-4D9B-BB1D-2A60D37FABC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.15.2:*:*:*:*:*:*:*","matchCriteriaId":"D47ADD6D-82C4-480B-8512-8D3C4CE07F47"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.15.3:*:*:*:*:*:*:*","matchCriteriaId":"D19BFBE7-2B1F-4A89-BB24-4B30F7D1DE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.15.4:*:*:*:*:*:*:*","matchCriteriaId":"6BDC0D06-CFE3-437D-8CFA-43F3E860A177"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.15.5:*:*:*:*:*:*:*","matchCriteriaId":"2A455FB8-393C-45D6-8F2A-55B617B2C7CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.16.0:*:*:*:*:*:*:*","matchCriteriaId":"DCE46693-11CD-48B4-9AEA-D2C00B3AD84E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.16.1:*:*:*:*:*:*:*","matchCriteriaId":"3E779D12-C8A1-44BB-AE0E-3B857EB36DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.16.2:*:*:*:*:*:*:*","matchCriteriaId":"D2548806-B98F-4FA1-826F-E0B036480283"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.16.3:*:*:*:*:*:*:*","matchCriteriaId":"000AA929-221D-4DD5-B9DD-9F27A0E9E53C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.16.4:*:*:*:*:*:*:*","matchCriteriaId":"49A81DDC-8D35-491E-9D37-1C1A93B90B24"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.16.5:*:*:*:*:*:*:*","matchCriteriaId":"6811A792-031A-4DD2-A549-C16FE21FCFA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.16.6:*:*:*:*:*:*:*","matchCriteriaId":"62A097C2-2480-4CEF-BDA1-85C0FF918797"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.17.0:*:*:*:*:*:*:*","matchCriteriaId":"A9522502-A801-45BB-8FFD-10C08537F4BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.17.1:*:*:*:*:*:*:*","matchCriteriaId":"116E514B-4DD6-42D8-BB25-55D66DD6474B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.17.2:*:*:*:*:*:*:*","matchCriteriaId":"BFC1A4BB-F427-4F23-90D5-90B19BB8014C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:0.17.3:*:*:*:*:*:*:*","matchCriteriaId":"A7A9841A-65CF-4AF8-8465-87D543C3E14C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"530F6FFB-2B29-458B-9EA2-44C47C026EA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mario_matzulla:cal:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"4C569E8A-4285-485C-9C94-BAE3CB552E98"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2009","CveId":"4158","Ordinal":"1","Title":"CVE-2009-4158","CVE":"CVE-2009-4158","Year":"2009"},"notes":[{"CveYear":"2009","CveId":"4158","Ordinal":"1","NoteData":"SQL injection vulnerability in the Calendar Base (cal) extension before 1.2.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.","Type":"Description","Title":"CVE-2009-4158"},{"CveYear":"2009","CveId":"4158","Ordinal":"2","NoteData":"2009-12-02","Type":"Other","Title":"Published"}]}}}