EUVD-2008-2341

Malware in sbrugna...

Design/Logic Flaw

Unspecified vulnerability in Frontend Filemanager airfilemanager 0.6.1 and earlier extension for TYPO3 allows remote attackers to execute arbitrary commands via unknown vectors...

CVE-2008-6685

The CVE-2008-6685 entry concerns Frontend Filemanager (air_filemanager) 0.6.1 and earlier TYPO3 extension. It describes an unspecified vulnerability that allows remote attackers to execute arbitrary commands via unknown vectors. The available sources confirm the affected software and the remote c...

CVE-2008-6685: Undefined Security Weakness

Unspecified vulnerability in Frontend Filemanager airfilemanager 0.6.1 and earlier extension for TYPO3 allows remote attackers to execute arbitrary commands via unknown vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the airfilemanager 0.6.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Authorization

Unspecified vulnerability in the airfilemanager 0.6.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary PHP code via unspecified vectors related to "insufficient file filtering."...

CVE-2008-2344

Cross-site scripting XSS vulnerability in the airfilemanager 0.6.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-2344

The CVE-2008-2344 entry concerns an XSS vulnerability in the air_filemanager TYPO3 extension (version 0.6.0 and earlier). The underlying flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NVD records a CVSSv2 base score of 4.3 (Medium, network vector, use...

CVE-2008-2345

The vulnerability CVE-2008-2345 affects the air_filemanager 0.6.0 and earlier TYPO3 extension. The underlying issue is insufficient file filtering that enables remote attackers to execute arbitrary PHP code. The connected documents indicate a high-severity, network-exposed issue with a base CVSS ...

CVE-2008-2344: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the airfilemanager 0.6.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-2345: Improper Control of Generation of Code

Unspecified vulnerability in the airfilemanager 0.6.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary PHP code via unspecified vectors related to "insufficient file filtering."...