EUVD-2009-2102

Malware in sbrugna...

CVE-2009-2106

SQL injection vulnerability in the Virtual Civil Services civserv extension 4.3.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

TYPO3 Security Bulletin

It has been discovered that the extension Virtual Civil Services civserv is vulnerable to SQL-injections. Release Date: June 16, 2009 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 4.3.2 and all versions below...