CVE-2014-7200

Cross-site scripting XSS vulnerability in pi1/class.txdmmjobcontrolpi1.php in the JobControl dmmjobcontrol extension 2.14.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via the txdmmjobcontrolpi1searchkeyword parameter to jobs/...

CVE-2014-7201

Multiple SQL injection vulnerabilities in the search function in pi1/class.txdmmjobcontrolpi1.php in the JobControl dmmjobcontrol extension 2.14.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via the 1 education, 2 region, or 3 sector fields, as demonstrated by t...

PT-2014-7832

Name of the Vulnerable Software and Affected Versions TYPO3 JobControl dmmjobcontrol extension versions 2.14.0 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the tx dmmjobcontrol pi1searchkeyword parameter to the "jobs/"...

Typo3 Extension JobControl 2.14.0 - Cross-Site Scripting SQL Injection

Typo3 Extension JobControl 2.14.0 - Cross-Site Scripting SQL Injection Mogwai Security Advisory MSA-2014-02 ---------------------------------------------------------------------- Title: JobControl dmmjobcontrol Multiple Vulnerabilities Product: dmmjobcontrol Typo3 Extension Affected versions:...

Several vulnerabilities in extension JobControl (dmmjobcontrol)

It has been discovered that the extension "JobControl" dmmjobcontrol is susceptible to Cross-Site Scripting and SQL Injection. Release Date: September 25, 2014 Bulletin update: October 6, 2014 added CVEs Component Type: Third party extension. This extension is not a part of the TYPO3 default...

CVE-2008-6689: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in JobControl dmmjobcontrol 1.15.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2008-4658: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JobControl dmmjobcontrol 1.15.4 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...