EUVD-2013-4598

Malware in sbrugna...

GHSA-RG6G-V4XM-G49Q News system (news) extension for TYPO3 vulnerable to SQL Injection

SQL injection vulnerability in the News system news extension before 1.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2013-5175

Name of the Vulnerable Software and Affected Versions TYPO3 News system news extension versions prior to 1.3.3 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 1.3.3, update to version 1.3.3 or later to resolve the issue...