EUVD-2008-5770

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in the Wir ber uns fsmipeople extension 0.0.24 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-5799

CVE-2008-5799 is an XSS vulnerability in the TYPO3 extension Wir ber uns (fsmi_people) version 0.0.24 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. According to NVD, the impact is partial integrity with no confidentiality/availabili...

CVE-2008-5800

CVE-2008-5800 refers to a SQL injection vulnerability in the TYPO3 extension fsmi_people (Wir ber uns) version 0.0.24 and earlier. The flaw allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The NVD entry lists a Base Score of 7.5 (HIGH) with network attack vector,...

CVE-2008-5799

Cross-site scripting XSS vulnerability in the Wir ber uns fsmipeople extension 0.0.24 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-5799: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Wir ber uns fsmipeople extension 0.0.24 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-5800: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Wir ber uns sic fsmipeople extension 0.0.24 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

TYPO3 Security Bulletin

Several vulnerabilities have been found in the following third party TYPO3 extensions: "advcalendar" advCalendar, "CMS Poll system" cmspoll, "eLuna Page Comments" elunapagecomments, "Wir ber uns" sic fsmipeople, "Dictionary" rtgdictionary Please read first: This Collective Security Bulletin CSB i...