CVE-2009-4336

CVE-2009-4336 concerns the Diocese of Portsmouth Calendar (pd_calendar) extension for TYPO3 (versions 0.4.1 and earlier). The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected software is TYPO3-...

CVE-2009-4337

CVE-2009-4337 describes a SQL injection in the TYPO3 Diocese of Portsmouth Calendar (pd_calendar) extension version 0.4.1 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands via unknown vectors, with impact described as partial confidentiality, integrity, and ...