EUVD-2011-1721

Malware in sbrugna...

EUVD-2008-6115

Malware in sbrugna...

EUVD-2008-6114

Malware in sbrugna...

EUVD-2008-3019

Malware in sbrugna...

EUVD-2008-3033

Malware in sbrugna...

CVE-2013-4720

SQL injection vulnerability in the WEC Discussion Forum extension before 2.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-4720

CVE-2013-4720 affects the WEC Discussion Forum extension for TYPO3, vulnerable in versions before 2.1.2. The issue is an SQL injection allowing remote attackers to execute arbitrary SQL via unspecified vectors. Exploitation details are not provided in the documents. Remediation: upgrade to versio...

PT-2013-5161

Name of the Vulnerable Software and Affected Versions TYPO3 WEC Discussion Forum extension versions prior to 2.1.2 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 2.1.2, update to version 2.1.2 or later to resolve...

CVE-2013-4720: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the WEC Discussion Forum extension before 2.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2011-1722

Multiple SQL injection vulnerabilities in WEC Discussion Forum wecdiscussion extension 2.1.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild in April 2011...

Sql injection

Multiple SQL injection vulnerabilities in WEC Discussion Forum wecdiscussion extension 2.1.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild in April 2011...

CVE-2011-1722

Multiple SQL injection vulnerabilities in WEC Discussion Forum wecdiscussion extension 2.1.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild in April 2011...

CVE-2011-1722

Multiple SQL injection vulnerabilities in WEC Discussion Forum wecdiscussion extension 2.1.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild in April 2011...

CVE-2011-1722

The WEC Discussion Forum (wec_discussion) extension (version 2.1.0 and earlier ) for TYPO3 is susceptible to multiple SQL injection vulnerabilities. These flaws allow remote attackers to execute arbitrary SQL commands via unspecified vectors. This vulnerability was documented as being exploited i...

CVE-2011-1722: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in WEC Discussion Forum wecdiscussion extension 2.1.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild in April 2011...

PT-2011-3322

Name of the Vulnerable Software and Affected Versions TYPO3 WEC Discussion Forum wec discussion extension versions 2.1.0 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands, which has been exploited in the wild. Recommendations For versions 2.1.0 and earlie...

SQL Injection vulnerabilities in extension "WEC Discussion Forum" (wec_discussion)

It has been discovered that the extension WEC Discussion Forum wecdiscussion is vulnerable to SQL Injection. Release Date: April 7, 2011 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 2.1.0 and all versions below...

VulnCheck KEV: CVE-2011-1722

Multiple SQL injection vulnerabilities in WEC Discussion Forum wecdiscussion extension 2.1.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild in April 2011...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the WEC Discussion Forum wecdiscussion extension 1.7.0 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-3029...

Sql injection

Multiple SQL injection vulnerabilities in the WEC Discussion Forum wecdiscussion extension 1.7.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...