EUVD-2008-3028

Malware in sbrugna...

Sql injection

SQL injection vulnerability in the Address Directory spdirectory extension 0.2.10 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-3037

Cross-site scripting XSS vulnerability in the Address Directory spdirectory extension 0.2.10 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-3038

SQL injection vulnerability in the Address Directory spdirectory extension 0.2.10 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Address Directory spdirectory extension 0.2.10 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-3037

Cross-site scripting XSS vulnerability in the Address Directory spdirectory extension 0.2.10 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-3038

SQL injection vulnerability in the Address Directory spdirectory extension 0.2.10 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-3038

The CVE-2008-3038 entry describes a SQL injection in the TYPO3 Address Directory (sp_directory) extension, affecting version 0.2.10 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands via unspecified vectors, indicating a web/app input handling flaw likely aff...

CVE-2008-3037

CVE-2008-3037 is an XSS vulnerability in the TYPO3 Address Directory extension (sp_directory) versions 0.2.10 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected product/component: TYPO3 sp_directory extension; vulnerable version...

CVE-2008-3038: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Address Directory spdirectory extension 0.2.10 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-3037: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Address Directory spdirectory extension 0.2.10 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...