CVE-2010-4960

The CVE-2010-4960 entry concerns an XSS vulnerability in the TYPO3 extension mh_branchenbuch, affecting versions prior to 0.9.1. Remote attackers can inject arbitrary script/HTML via unspecified vectors. Root cause details are not fully disclosed in the provided documents, but the fix is to upgra...

CVE-2008-3054

CVE-2008-3054 describes an SQL injection vulnerability in the Branchenbuch (Yellow Pages) extension mh_branchenbuch for TYPO3 , versions 0.8.1 and earlier. The flaw allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The connected documents confirm the affected prod...

CVE-2008-3054: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Branchenbuch aka Yellow Pages o mhbranchenbuch extension 0.8.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...