CVE-2010-4950

SQL injection vulnerability in the Event event extension before 0.3.7 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2011-1885

Name of the Vulnerable Software and Affected Versions TYPO3 Event event extension versions prior to 0.3.7 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 0.3.7, update to version 0.3.7 or later to resolve the issue...