EUVD-2008-6658

Malware in sbrugna...

EUVD-2008-6657

Malware in sbrugna...

CVE-2008-6698

Cross-site scripting XSS vulnerability in TARGET-E WorldCup Bets worldcup 2.0.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2008-6698

CVE-2008-6698 affects the TARGET-E WorldCup Bets TYPO3 extension for version 2.0.0 and earlier. The vulnerability is a cross-site scripting (XSS) issue that allows remote attackers to inject arbitrary web script or HTML via unknown vectors. The NVD CVSSv2 base score is 4.3 (MEDIUM) with a network...

CVE-2008-6697

CVE-2008-6697 describes a SQL injection vulnerability in the TARGET-E WorldCup Bets (worldcup) 2.0.0 and earlier extension for TYPO3. The issue allows remote attackers to execute arbitrary SQL commands via unknown vectors, indicating a classic injection flaw in the extension’s interaction with th...

CVE-2008-6698: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in TARGET-E WorldCup Bets worldcup 2.0.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2008-6697: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in TARGET-E WorldCup Bets worldcup 2.0.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...