Webkit PDFs for TYPO3 has SQL Injection vulnerability

HIGH 7.5CVE-2010-4961 · GHSA-9568-hcj9-rf7v · Published 09/10/2011 · updated 16/06/2026

In short

CVE-2010-4961 is a HIGH (CVSS 7.5) vulnerability affecting dmk/webkitpdf, webkitpdf (dev-team typoheads).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 65.4% of all vulnerabilities.
Fix: update to 1.1.4 or later.

Package	Affected versions	Patched versions
dmk/webkitpdf Packagist	`< 1.1.4`	`1.1.4`
webkitpdf dev-team_typoheads	`= 1.0.2= 1.1.0= 1.1.1= 1.1.2≤ 1.1.3`	No fix yet

Description

SQL injection vulnerability in the Webkit PDFs (webkitpdf) extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

NVD description

SQL injection vulnerability in the Webkit PDFs (webkitpdf) extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

References

More vulnerabilities in dmk/webkitpdf

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free