PT-2014-5483

Name of the Vulnerable Software and Affected Versions TYPO3 extension si bibtex version 0.2.3 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is related to the import functionality of the si bibtex extension...

PT-2014-5484

Name of the Vulnerable Software and Affected Versions TYPO3 si bibtex extension version 0.2.3 Description The issue concerns SQL injection vulnerabilities in the search and list functionality of the si bibtex extension for TYPO3, allowing remote attackers to execute arbitrary SQL commands...