3 matches found
CVE-2015-4613: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the backend module in the Developer Log devlog extension before 2.11.4 for TYPO3 allows remote editors to execute arbitrary SQL commands via unspecified vectors...
CVE-2010-0326
CVE-2010-0326 is an XSS in the TYPO3 Devlog extension (version 2.9.1 and earlier). Remote attackers could inject arbitrary web script/HTML via unspecified vectors. Affected: TYPO3 Devlog, 2.9.1 and earlier. The connected sources confirm the description but do not provide concrete exploit details,...
CVE-2010-0326: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Developer log devlog extension 2.9.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...