EUVD-2009-4136

Malware in sbrugna...

Sql injection

SQL injection vulnerability in the Trips mchtrips extension 2.0.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-4166

SQL injection vulnerability in the Trips mchtrips extension 2.0.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-4166

CVE-2009-4166 : The TYPO3 extension mchtrips (Trips) version 2.0.0 is affected. A SQL injection flaw allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The vulnerability stems from improper handling of input in the extension, enabling unauthorized database access. ...