CVE-2008-5609: TYPO3 Commerce Extension

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in the Commerce extension 0.9.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected products

• TYPO3 Commerce Extension: up to and including 0.9.6; version 0.8.32 only; version 0.8.35 only; version 0.9.0 only; version 0.9.5 only

Published 2008-12-17. Last modified 2026-06-16.