CVE-2013-4748

SQL injection vulnerability in the News system news extension before 1.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the News system news extension before 1.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-4748: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the News system news extension before 1.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2013-5172

Name of the Vulnerable Software and Affected Versions TYPO3 myquizpoll extension versions prior to 2.0.6 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 2.0.6, update to version 2.0.6 or later to resolve the issue...

PT-2013-5175

Name of the Vulnerable Software and Affected Versions TYPO3 News system news extension versions prior to 1.3.3 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 1.3.3, update to version 1.3.3 or later to resolve the issue...

CVE-2012-6144: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Backend History module in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 allows remote authenticated backend users to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-6577

SQL injection vulnerability in the Formhandler extension before 1.4.1 for TYPO3 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Formhandler extension before 1.4.1 for TYPO3 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the RSS feed from records extension 1.0.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-6577

SQL injection vulnerability in the Formhandler extension before 1.4.1 for TYPO3 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-4719: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the SEO Pack for ttnews extension before 1.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-4721: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the RSS feed from records extension 1.0.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2013-5160

Name of the Vulnerable Software and Affected Versions TYPO3 tt news extension versions prior to 1.3.3 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 1.3.3, update to version 1.3.3 or later to resolve the issue...

CVE-2012-6577: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Formhandler extension before 1.4.1 for TYPO3 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors...

PT-2013-2031

Name of the Vulnerable Software and Affected Versions TYPO3 Formhandler extension versions prior to 1.4.1 Description The issue allows remote authenticated users with certain permissions to execute arbitrary SQL commands. Recommendations For versions prior to 1.4.1, update to version 1.4.1 or lat...

PT-2013-5161

Name of the Vulnerable Software and Affected Versions TYPO3 WEC Discussion Forum extension versions prior to 2.1.2 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 2.1.2, update to version 2.1.2 or later to resolve...

CVE-2013-4720: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the WEC Discussion Forum extension before 2.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the metafeedit extension 0.1.10 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-4683

SQL injection vulnerability in the metafeedit extension 0.1.10 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2013-5131

Name of the Vulnerable Software and Affected Versions typo3 sofortueberweisung2commerce extension versions prior to 2.0.1 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 2.0.1, update to version 2.0.1 or later to resolve the...