EUVD-2013-4570

Malware in sbrugna...

CVE-2010-0337

SQL injection vulnerability in the ttnews Mail alert dl3ttnewsalerts extension 0.2.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Design/Logic Flaw

The News ttnews extension before 3.5.2 for TYPO3 allows remote attackers to have unspecified impact via vectors related to an "insecure unserialize" issue...

CVE-2014-6290

The News ttnews extension before 3.5.2 for TYPO3 allows remote attackers to have unspecified impact via vectors related to an "insecure unserialize" issue...

CVE-2014-6290

The News ttnews extension before 3.5.2 for TYPO3 allows remote attackers to have unspecified impact via vectors related to an "insecure unserialize" issue...

CVE-2014-6290: Improper Input Validation

The News ttnews extension before 3.5.2 for TYPO3 allows remote attackers to have unspecified impact via vectors related to an "insecure unserialize" issue...

CVE-2013-4719

CVE-2013-4719 is a SQL injection vulnerability in the TYPO3 SEO Pack’s tt_news extension, affecting versions prior to 1.3.3. The weakness allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected software is the TYPO3 SEO Pack for tt_news; the exact root cause de...

CVE-2013-4719: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the SEO Pack for ttnews extension before 1.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the ttnews Mail alert dl3ttnewsalerts extension 0.2.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-0337

The CVE-2010-0337 entry concerns a SQL injection in the TYPO3 extension tt_news Mail alert (dl3_tt_news_alerts) versions up to and including 0.2.0. The vulnerability allows remote attackers to execute arbitrary SQL commands via unspecified vectors. It is noted in the sources as a high-severity is...

CVE-2010-0330

The CVE-2010-0330 entry concerns the TYPO3 extension Googlemaps for tt_news (jf_easymaps). Affected versions are 1.0.2 and earlier. The root cause is an SQL injection vulnerability that lets remote attackers execute arbitrary SQL commands via unspecified vectors. Practical impact is information d...

CVE-2010-0330: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Googlemaps for ttnews jfeasymaps extension 1.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-0337: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the ttnews Mail alert dl3ttnewsalerts extension 0.2.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Vulnerabilities in extensions in pmk_rssnewsexport and scm_rdfexport

It has been discovered that the extensions pmkrssnewsexport and cmrdfexport are vulnerable to SQL Injection attacks. Component Type: Third party extensions. These extensions are not part of the TYPO3 default installation. Affected Versions: pmkrssnewsexport: All versions, cmrdfexport: All version...