Multiple vulnerabilities in extension "Fe user statistic" (festat)

It has been discovered that the extension "Fe user statistic" festat is susceptible to Cross-Site Scripting, Insecure Unserialize and Information Disclosure. Release Date: March 03, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affecte...

CVE-2010-4952

SQL injection vulnerability in the FE user statistic festat extension before 0.2.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-4952

The CVE-2010-4952 issue affects the TYPO3 FE user statistics extension festat, vulnerable in versions before 0.2.4 due to an SQL injection flaw that allows remote attackers to execute arbitrary SQL via unspecified vectors. The vulnerability can impact confidentiality, integrity, and availability ...