EUVD-2008-5768

Malware in sbrugna...

Sql injection

SQL injection vulnerability in the CMS Poll system cmspoll extension before 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-5798

SQL injection vulnerability in the CMS Poll system cmspoll extension before 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-5798

The CVE-2008-5798 entry concerns the TYPO3 cms_poll extension (CMS Poll system) vulnerable to an SQL injection in versions before 0.1.1. The root cause is an SQL injection vulnerability in the cms_poll component, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors....

CVE-2008-5798

SQL injection vulnerability in the CMS Poll system cmspoll extension before 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

TYPO3 Security Bulletin

Several vulnerabilities have been found in the following third party TYPO3 extensions: "advcalendar" advCalendar, "CMS Poll system" cmspoll, "eLuna Page Comments" elunapagecomments, "Wir ber uns" sic fsmipeople, "Dictionary" rtgdictionary Please read first: This Collective Security Bulletin CSB i...