EUVD-2009-4361

Malware in sbrugna...

Sql injection

SQL injection vulnerability in the Document Directorys danpdocumentdirs extension 1.10.7 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-4393

The CVE-2009-4393 entry describes a SQL injection vulnerability in the TYPO3 extension Document Directorys (danp_documentdirs) version 1.10.7 and earlier. The flaw permits remote attackers to execute arbitrary SQL commands via unspecified vectors, affecting affected TYPO3 installations using this...

CVE-2009-4393

SQL injection vulnerability in the Document Directorys danpdocumentdirs extension 1.10.7 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Multiple vulnerabilities in third party extensions

Several vulnerabilities have been found in the following third party TYPO3 extensions: Car car, TYPO3 Watchdog abawatchdog, File list drblob, ListMan nllistman, XDS Staff List xdsstaff, Document Directorys danpdocumentdirs, Random Prayer Version 2 steprayer2, Diocese of Portsmouth Resources...