EUVD-2008-6426

Malware in sbrugna...

Sql injection

SQL injection vulnerability in the HBook hbook extension 2.3.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6456

SQL injection vulnerability in the HBook hbook extension 2.3.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6456

CVE-2008-6456 concerns the HBook (h_book) TYPO3 extension (version 2.3.0 and earlier). The connected documents confirm a SQL injection vulnerability in this extension, enabling remote attackers to execute arbitrary SQL commands through unspecified vectors. The affected component is the HBook plug...