CVE-2015-4609

SQL injection vulnerability in the wtdirectory extension before 1.4.2 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Smoelenboek ncgovsmoelenboek extension before 1.0.9 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Store Locator locator extension before 3.3.1 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the "FAQ - Frequently Asked Questions" jsfaq extension before 1.2.1 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-4612

SQL injection vulnerability in the "FAQ - Frequently Asked Questions" jsfaq extension before 1.2.1 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-4613

SQL injection vulnerability in the backend module in the Developer Log devlog extension before 2.11.4 for TYPO3 allows remote editors to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-4611

SQL injection vulnerability in the Smoelenboek ncgovsmoelenboek extension before 1.0.9 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-4609

SQL injection vulnerability in the wtdirectory extension before 1.4.2 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-4611

SQL injection vulnerability in the Smoelenboek ncgovsmoelenboek extension before 1.0.9 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

PT-2015-6637

Name of the Vulnerable Software and Affected Versions TYPO3 Store Locator locator extension versions prior to 3.3.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For versions prior to 3.3.1, update to version 3.3.1 or later to resolve t...

PT-2015-6640

Name of the Vulnerable Software and Affected Versions TYPO3 Developer Log devlog extension versions prior to 2.11.4 Description A SQL injection issue in the backend module of the Developer Log devlog extension for TYPO3 allows remote editors to execute arbitrary SQL commands. Recommendations For...

CVE-2015-4610: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Store Locator locator extension before 3.3.1 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

PT-2015-6636

Name of the Vulnerable Software and Affected Versions TYPO3 wt directory extension versions prior to 1.4.2 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For versions prior to 1.4.2, update to version 1.4.2 or later to resolve the issue...

PT-2015-6638

Name of the Vulnerable Software and Affected Versions TYPO3 extension ncgov smoelenboek versions prior to 1.0.9 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For versions prior to 1.0.9, update to version 1.0.9 or later to resolve the...

CVE-2015-4609: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the wtdirectory extension before 1.4.2 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-4348

SQL injection vulnerability in the Spider Contacts module for Drupal allows remote authenticated users with the "access Spider Contacts category administration" permission to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Spider Contacts module for Drupal allows remote authenticated users with the "access Spider Contacts category administration" permission to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-4348

SQL injection vulnerability in the Spider Contacts module for Drupal allows remote authenticated users with the "access Spider Contacts category administration" permission to execute arbitrary SQL commands via unspecified vectors...

PT-2015-6530

Name of the Vulnerable Software and Affected Versions Drupal Spider Contacts module affected versions not specified Description A SQL injection issue in the Spider Contacts module for Drupal allows remote authenticated users with the "access Spider Contacts category administration" permission to...

CVE-2015-2956

SQL injection vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...