PT-2013-3276

Name of the Vulnerable Software and Affected Versions Symantec Security Information Manager appliance versions 4.7.x through 4.8.x Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For versions 4.7.x through 4.8.x, update to version 4.8.1 o...

CVE-2013-0560

Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2012-5766...

CVE-2012-5766

Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to execute arbitrary SQL commands via vectors involving the RNVisibility page and unspecified screens, a different vulnerability than...

CVE-2013-0560: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2012-5766...

PT-2013-2427

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator versions 5.1 through 5.2 IBM Sterling File Gateway versions 2.1 through 2.2 Description The issue allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Recommendations For IBM...

CVE-2013-4748

SQL injection vulnerability in the News system news extension before 1.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the News system news extension before 1.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-4745

SQL injection vulnerability in the My quiz and poll myquizpoll extension before 2.0.6 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-4748: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the News system news extension before 1.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2013-5172

Name of the Vulnerable Software and Affected Versions TYPO3 myquizpoll extension versions prior to 2.0.6 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 2.0.6, update to version 2.0.6 or later to resolve the issue...

PT-2013-5175

Name of the Vulnerable Software and Affected Versions TYPO3 News system news extension versions prior to 1.3.3 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 1.3.3, update to version 1.3.3 or later to resolve the issue...

CVE-2012-6144: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Backend History module in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 allows remote authenticated backend users to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-6577

SQL injection vulnerability in the Formhandler extension before 1.4.1 for TYPO3 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Formhandler extension before 1.4.1 for TYPO3 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the RSS feed from records extension 1.0.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-6577

SQL injection vulnerability in the Formhandler extension before 1.4.1 for TYPO3 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors...

PT-2013-2031

Name of the Vulnerable Software and Affected Versions TYPO3 Formhandler extension versions prior to 1.4.1 Description The issue allows remote authenticated users with certain permissions to execute arbitrary SQL commands. Recommendations For versions prior to 1.4.1, update to version 1.4.1 or lat...

CVE-2013-4721: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the RSS feed from records extension 1.0.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2013-5160

Name of the Vulnerable Software and Affected Versions TYPO3 tt news extension versions prior to 1.3.3 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 1.3.3, update to version 1.3.3 or later to resolve the issue...

PT-2013-5162

Name of the Vulnerable Software and Affected Versions TYPO3 extension 'records' version 1.0.0 and earlier Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions 1.0.0 and earlier, at the moment, there is no information about a new...