EUVD-2015-2891

Malware in sbrugna...

[RT-SA-2015-002] SQL Injection in TYPO3 Extension Akronymmanager

Advisory: SQL Injection in TYPO3 Extension Akronymmanager An SQL injection vulnerability in the TYPO3 extension "Akronymmanager" allows authenticated attackers to inject SQL statements and thereby read data from the TYPO3 database. Details ======= Product: sbakronymmanager Affected Versions: =0.5...

SQL Injection in extension "Akronymmanager" (sb_akronymmanager)

It has been discovered that the extension "Akronymmanager" sbakronymmanager is susceptible to SQL Injection Release Date: June 18, 2015 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 0.5.0 and below Vulnerability...

CVE-2015-2803

SQL injection vulnerability in mod1/index.php in the Akronymmanager sbakronymmanager extension before 7.0.0 for TYPO3 allows remote authenticated users with permission to maintain acronyms to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in mod1/index.php in the Akronymmanager sbakronymmanager extension before 7.0.0 for TYPO3 allows remote authenticated users with permission to maintain acronyms to execute arbitrary SQL commands via the id parameter...

CVE-2015-2803

CVE-2015-2803 is a SQL injection affecting the TYPO3 extension sb_akronymmanager (Akronymmanager) for versions

CVE-2015-2803

SQL injection vulnerability in mod1/index.php in the Akronymmanager sbakronymmanager extension before 7.0.0 for TYPO3 allows remote authenticated users with permission to maintain acronyms to execute arbitrary SQL commands via the id parameter...

PT-2015-5899

Name of the Vulnerable Software and Affected Versions Akronymmanager sb akronymmanager extension versions prior to 7.0.0 for TYPO3 Description The issue allows remote authenticated users with permission to maintain acronyms to execute arbitrary SQL commands. This is achieved via the id parameter ...

CVE-2015-2803: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in mod1/index.php in the Akronymmanager sbakronymmanager extension before 7.0.0 for TYPO3 allows remote authenticated users with permission to maintain acronyms to execute arbitrary SQL commands via the id parameter...

TYPO3 Extension Akronymmanager 0.5.0 - SQL Injection

TYPO3 Extension Akronymmanager 0.5.0 - SQL Injection Advisory: SQL Injection in TYPO3 Extension Akronymmanager An SQL injection vulnerability in the TYPO3 extension "Akronymmanager" allows authenticated attackers to inject SQL statements and thereby read data from the TYPO3 database. Details...

TYPO3 Akronymmanager Extension 0.5.0 - SQL Injection Vulnerability

TYPO3 Extension Akronymmanager versions 0.5.0 and below suffer from a remote SQL injection vulnerability. Advisory: SQL Injection in TYPO3 Extension Akronymmanager An SQL injection vulnerability in the TYPO3 extension "Akronymmanager" allows authenticated attackers to inject SQL statements and...

TYPO3 Extension Akronymmanager 0.5.0 - SQL Injection

Advisory: SQL Injection in TYPO3 Extension Akronymmanager An SQL injection vulnerability in the TYPO3 extension "Akronymmanager" allows authenticated attackers to inject SQL statements and thereby read data from the TYPO3 database. Details ======= Product: sbakronymmanager Affected Versions:...

TYPO3 Extension Akronymmanager 0.5.0 SQL Injection

Advisory: SQL Injection in TYPO3 Extension Akronymmanager An SQL injection vulnerability in the TYPO3 extension "Akronymmanager" allows authenticated attackers to inject SQL statements and thereby read data from the TYPO3 database. Details ======= Product: sbakronymmanager Affected Versions: =0.5...

CVE-2014-6238

Cross-site scripting XSS vulnerability in the Akronymmanager aka SB Folderdownload extension 0.5.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Akronymmanager aka SB Folderdownload extension 0.5.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-6238

Cross-site scripting XSS vulnerability in the Akronymmanager aka SB Folderdownload extension 0.5.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-6238

CVE-2014-6238 is a Cross-Site Scripting (XSS) vulnerability affecting the TYPO3 extension Akronymmanager (aka SB Folderdownload) version 0.5.0 and earlier. The connected TYPO3 security bulletin lists sb_akronymmanager as vulnerable with XSS via unspecified vectors, but does not provide exploit de...

CVE-2014-6238: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Akronymmanager aka SB Folderdownload extension 0.5.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2014-7111

Name of the Vulnerable Software and Affected Versions Akronymmanager aka SB Folderdownload extension versions 0.5.0 and earlier for TYPO3 Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This can be...