EUVD-2010-1056

Malware in sbrugna...

CVE-2010-1025

Cross-site scripting XSS vulnerability in the TGM-Newsletter tgmnewsletter extension 0.0.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-1024

SQL injection vulnerability in the TGM-Newsletter tgmnewsletter extension 0.0.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the TGM-Newsletter tgmnewsletter extension 0.0.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Sql injection

SQL injection vulnerability in the TGM-Newsletter tgmnewsletter extension 0.0.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-1025

Cross-site scripting XSS vulnerability in the TGM-Newsletter tgmnewsletter extension 0.0.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-1024

SQL injection vulnerability in the TGM-Newsletter tgmnewsletter extension 0.0.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-1025

The provided data identifies CVE-2010-1025 as a Cross-site scripting (XSS) vulnerability in the TYPO3 extension TGM-Newsletter (tgm_newsletter) version 0.0.2. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The NVD metrics show a MEDIUM severity (...

CVE-2010-1024

CVE-2010-1024 concerns a SQL injection vulnerability in the TYPO3 TGM-Newsletter extension (tgm_newsletter) version 0.0.2 . The description states that remote attackers can execute arbitrary SQL commands via unspecified vectors . Connected documents confirm the affected component and root cause (...

CVE-2010-1025: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the TGM-Newsletter tgmnewsletter extension 0.0.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-1024: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the TGM-Newsletter tgmnewsletter extension 0.0.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...