4 matches found
CVE-2023-22488 Missing authorization in Flarum
Flarum is a forum software for building communities. Using the notifications feature, one can read restricted/private content and bypass access checks that would be in place for such content. The notification-sending component does not check that the subject of the notification can be seen by the...
CVE-2009-4339
SQL injection vulnerability in the Subscription mfsubscription extension 0.2.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...
Sql injection
SQL injection vulnerability in the Subscription mfsubscription extension 0.2.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...
CVE-2009-4339
SQL injection vulnerability in the Subscription mfsubscription extension 0.2.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...