PT-2015-6639

Name of the Vulnerable Software and Affected Versions TYPO3 extension "FAQ - Frequently Asked Questions" js faq versions prior to 1.2.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For versions prior to 1.2.1, update to version 1.2.1 o...

CVE-2015-4612: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the "FAQ - Frequently Asked Questions" jsfaq extension before 1.2.1 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...