PT-2011-1822

Name of the Vulnerable Software and Affected Versions TYPO3 Commenting system Backend Module commentsbe extension versions 0.0.2 and earlier Description A SQL injection issue exists in the Commenting system Backend Module commentsbe extension for TYPO3, allowing remote attackers to execute...

CVE-2010-4887: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Commenting system Backend Module commentsbe extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...