CVE-2009-4804

Cross-site scripting XSS vulnerability in the Calendar Base cal extension before 1.1.1 for TYPO3, when Internet Explorer 6 is used, allows remote attackers to inject arbitrary web script or HTML via "search parameters."...

CVE-2009-4158

SQL injection vulnerability in the Calendar Base cal extension before 1.2.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

EUVD-2009-4767

Malware in sbrugna...

EUVD-2014-8166

Malware in sbrugna...

EUVD-2010-2147

Malware in sbrugna...

CVE-2010-2131

SQL injection vulnerability in the Calendar Base cal extension before 1.3.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via iCalendar data...

CVE-2014-8325

The Calendar Base cal extension before 1.5.9 and 1.6.x before 1.6.1 for TYPO3 allows remote attackers to cause a denial of service resource consumption via vectors related to the PHP PCRE library...

Code injection

The Calendar Base cal extension before 1.5.9 and 1.6.x before 1.6.1 for TYPO3 allows remote attackers to cause a denial of service resource consumption via vectors related to the PHP PCRE library...

CVE-2014-8325

The Calendar Base cal extension before 1.5.9 and 1.6.x before 1.6.1 for TYPO3 allows remote attackers to cause a denial of service resource consumption via vectors related to the PHP PCRE library...

CVE-2014-8325

CVE-2014-8325 affects the TYPO3 Calendar Base (cal) extension. The vulnerability arises when user input is passed to PHP’s PCRE library without validation, enabling remote attackers to cause a denial of service through resource consumption. Affected are TYPO3 cal versions before 1.5.9 and 1.6.x b...

PT-2014-8470

Name of the Vulnerable Software and Affected Versions TYPO3 Calendar Base cal extension versions prior to 1.5.9 TYPO3 Calendar Base cal extension version 1.6.x prior to 1.6.1 Description The issue allows remote attackers to cause a denial of service, specifically resource consumption, through...

CVE-2014-8325: Undefined Security Weakness

The Calendar Base cal extension before 1.5.9 and 1.6.x before 1.6.1 for TYPO3 allows remote attackers to cause a denial of service resource consumption via vectors related to the PHP PCRE library...

Denial of Service vulnerability in extension Calendar Base (cal)

It has been discovered that the extension "Calendar Base" cal is susceptible to Denial of Service. Release Date: October 17, 2014 Bulletin Update: October 18, 2014 added CVE Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: a...

CVE-2010-2131

SQL injection vulnerability in the Calendar Base cal extension before 1.3.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via iCalendar data...

Sql injection

SQL injection vulnerability in the Calendar Base cal extension before 1.3.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via iCalendar data...

CVE-2010-2131

SQL injection vulnerability in the Calendar Base cal extension before 1.3.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via iCalendar data...

CVE-2010-2131

CVE-2010-2131 affects the TYPO3 Calendar Base (cal) extension prior to 1.3.2. The vulnerability allows remote attackers to execute arbitrary SQL commands via iCalendar data, due to an SQL injection in the cal extension. In public records (NVD) the issue is rated HIGH (CVSS v2: 7.5) with network a...

CVE-2010-2131: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Calendar Base cal extension before 1.3.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via iCalendar data...

Cross site scripting

Cross-site scripting XSS vulnerability in the Calendar Base cal extension before 1.1.1 for TYPO3, when Internet Explorer 6 is used, allows remote attackers to inject arbitrary web script or HTML via "search parameters."...

CVE-2009-4804

Cross-site scripting XSS vulnerability in the Calendar Base cal extension before 1.1.1 for TYPO3, when Internet Explorer 6 is used, allows remote attackers to inject arbitrary web script or HTML via "search parameters."...