CVE-2013-4745

CVE-2013-4745 is a SQL injection vulnerability in the TYPO3 extension myquizpoll prior to version 2.0.6, enabling remote attackers to execute arbitrary SQL commands via unspecified vectors. The issue affects the myquizpoll component for TYPO3 and is documented across multiple feeds (NVD, Red Hat,...

PT-2013-5172

Name of the Vulnerable Software and Affected Versions TYPO3 myquizpoll extension versions prior to 2.0.6 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 2.0.6, update to version 2.0.6 or later to resolve the issue...

CVE-2013-4746: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the My quiz and poll myquizpoll extension before 2.0.6 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4745: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the My quiz and poll myquizpoll extension before 2.0.6 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2013-5173

Name of the Vulnerable Software and Affected Versions TYPO3 My quiz and poll myquizpoll extension versions prior to 2.0.6 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 2.0.6, update to...

Several vulnerabilities in third party extensions

Several vulnerabilities have been found in the following third-party TYPO3 extensions: fed, myquizpoll, push2rss3ds, slideshare, wecdiscussion Release Date: February 19, 2013 Please read first: This Collective Security Bulletin CSB is a listing of vulnerable extensions with neither significant...

CVE-2008-6462

The CVE-2008-6462 affects the TYPO3 extension “myquizpoll” prior to version 0.1.4. It is a SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via unspecified vectors, as described in the public records. The connected sources confirm the vulnerability detail...