CVE-2008-3041

Unspecified vulnerability in the DAM Frontend damfrontend extension 0.1.0 and earlier for TYPO3 has unknown impact and attack vectors related to "broken access control."...

CVE-2008-3039

SQL injection vulnerability in the DAM Frontend damfrontend extension 0.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-3039

CVE-2008-3039 describes a SQL injection vulnerability in the TYPO3 DAM Frontend extension (dam_frontend) for TYPO3, affecting version 0.1.0 and earlier. The underlying issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The NVD entry assigns a high severity (C...

CVE-2008-3042

CVE-2008-3042 affects TYPO3 DAM Frontend (dam_frontend) extension ≤0.1.0. The vulnerability is described as an unspecified issue with unknown impact and attack vectors related to “Improper Error Handling.” The connected documents do not provide concrete exploit details, affected versions beyond t...

CVE-2008-3052

Unspecified vulnerability in the SQL Frontend mhomsqlio extension 1.0.11 and earlier for TYPO3 allows remote attackers to cause a denial of service via unknown vectors...

CVE-2008-3040

Unspecified vulnerability in the DAM Frontend damfrontend extension 0.1.0 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors...

CVE-2008-3040

CVE-2008-3040 concerns the TYPO3 DAM Frontend (dam_frontend) extension, affected in versions up to 0.1.0. The connected documents confirm an unspecified vulnerability that allows remote attackers to obtain sensitive information via unknown vectors. The root cause, impact details, and affected com...

CVE-2008-3042: Undefined Security Weakness

Unspecified vulnerability in the DAM Frontend damfrontend extension 0.1.0 and earlier for TYPO3 has unknown impact and attack vectors related to "Improper Error Handling."...

CVE-2008-3041: Undefined Security Weakness

Unspecified vulnerability in the DAM Frontend damfrontend extension 0.1.0 and earlier for TYPO3 has unknown impact and attack vectors related to "broken access control."...

CVE-2008-3052: Undefined Security Weakness

Unspecified vulnerability in the SQL Frontend mhomsqlio extension 1.0.11 and earlier for TYPO3 allows remote attackers to cause a denial of service via unknown vectors...

TYPO3 Security Bulletin

Several vulnerabilities have been found in TYPO3 third party extensions. Please read first: This Collective Security Bulletin CSB is a listing of vulnerable extensions with neither significant download numbers nor other special importance amongst the TYPO3 Community. The intention of CSBs is to...

Sql injection

Multiple SQL injection vulnerabilities in Concepts & Solutions QuickUpCMS allow remote attackers to execute arbitrary SQL commands via the 1 nr parameter to a frontend/news.php, the 2 id parameter to b events3.php and c videos2.php in frontend/, the 3 y parameter to d frontend/events2.php, and th...

CVE-2008-2530

Multiple SQL injection vulnerabilities in Concepts & Solutions QuickUpCMS allow remote attackers to execute arbitrary SQL commands via the 1 nr parameter to a frontend/news.php, the 2 id parameter to b events3.php and c videos2.php in frontend/, the 3 y parameter to d frontend/events2.php, and th...

CVE-2008-2530: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Concepts & Solutions QuickUpCMS allow remote attackers to execute arbitrary SQL commands via the 1 nr parameter to a frontend/news.php, the 2 id parameter to b events3.php and c videos2.php in frontend/, the 3 y parameter to d frontend/events2.php, and th...

Sql injection

SQL injection vulnerability in the Library for Frontend Plugins aka sgzfelib extension 1.1.512 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified "user input."...

CVE-2008-2489: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Library for Frontend Plugins aka sgzfelib extension 1.1.512 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified "user input."...

Multiple vulnerabilities in extension Frontend Filemanager (air_filemanager)

It has been discovered that the extension Frontend Filemanager airfilemanager is susceptible to Cross Site Scripting XSS attacks and allows Remote Code Execution. Component Type: Third party extensions. These extensions are not part of the TYPO3 default installation. Affected Versions: Version...

Multiple vulnerabilities in extension Frontend User Registration (sr_feuser_register)

It has been discovered that the extension Frontend User Registration srfeuserregister is susceptible to Cross Site Scripting XSS attacks and allows Remote Command Execution. Component Type: Third party extensions. These extensions are not part of the TYPO3 default installation. Affected Versions:...

CVE-2008-2043: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in cPanel, possibly 11.18.3 and 11.19.3, allow remote attackers to 1 execute arbitrary code via the command1 parameter to frontend/x2/cron/editcronsimple.html, and perform various administrative actions via 2 frontend/x2/sql/adddb.html, 3...

CVE-2008-1499: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in frontend/x/manpage.html in cPanel 11.18.3 and 11.21.0-BETA allows remote attackers to inject arbitrary web script or HTML via the query string...