PT-2014-7832

Name of the Vulnerable Software and Affected Versions TYPO3 JobControl dmmjobcontrol extension versions 2.14.0 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the tx dmmjobcontrol pi1searchkeyword parameter to the "jobs/"...

CVE-2008-6689

SQL injection vulnerability in JobControl dmmjobcontrol 1.15.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...