EUVD-2008-6431

Malware in sbrugna...

Sql injection

SQL injection vulnerability in the Random Prayer 2 steprayer2 extension 0.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-4394

SQL injection vulnerability in the Random Prayer 2 steprayer2 extension 0.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-4395

Cross-site scripting XSS vulnerability in the Random Prayer 2 steprayer2 extension 0.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-4395

Cross-site scripting XSS vulnerability in the Random Prayer 2 steprayer2 extension 0.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-4394

CVE-2009-4394 corresponds to a SQL injection vulnerability in the TYPO3 Random Prayer 2 (ste_prayer2) extension, version 0.0.3 and earlier. The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors in the affected extension. Affected component: TYPO3 extension st...

CVE-2009-4395

Cross-site scripting (XSS) vulnerability in the TYPO3 extension Random Prayer 2 (ste_prayer2) version 0.0.3 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, enabling client-side script execution. Affected component is the ste_prayer2 ex...

Sql injection

SQL injection vulnerability in the Random Prayer 2 steprayer2 extension before 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6461

SQL injection vulnerability in the Random Prayer 2 steprayer2 extension before 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6461

CVE-2008-6461 describes an SQL injection in the TYPO3 Random Prayer 2 (ste_prayer2) extension prior to version 0.0.3. The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors, indicating a vulnerability in how user input is handled within the extension’s databas...