CVE-2010-4891

Vulnerability: The TYPO3 extension ke_yac (Yet Another Calendar) is affected by a SQL injection in versions before 1.1.2. Root cause per sources: improper handling of input in the extension allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Impact: remote exploitat...

CVE-2010-4891: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Yet Another Calendar keyac extension before 1.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-4890: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Yet Another Calendar keyac extension before 1.1.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...