EUVD-2014-6180

Malware in sbrugna...

EUVD-2014-6181

Malware in sbrugna...

GHSA-MQHG-C7W9-W3CV WEC Map (wec_map) extension for TYPO3 allows Cross-site Scripting

Cross-site scripting XSS vulnerability in the WEC Map wecmap extension before 3.0.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

WEC Map (wec_map) extension for TYPO3 allows Cross-site Scripting

Cross-site scripting XSS vulnerability in the WEC Map wecmap extension before 3.0.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

WEC Map (wec_map) extension for TYPO3 allows SQL Injection

SQL injection vulnerability in the WEC Map wecmap extension before 3.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

GHSA-F3V6-G4MV-PJHQ WEC Map (wec_map) extension for TYPO3 allows SQL Injection

SQL injection vulnerability in the WEC Map wecmap extension before 3.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-6295

SQL injection vulnerability in the WEC Map wecmap extension before 3.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the WEC Map wecmap extension before 3.0.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Sql injection

SQL injection vulnerability in the WEC Map wecmap extension before 3.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-6296

Cross-site scripting XSS vulnerability in the WEC Map wecmap extension before 3.0.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-6295

SQL injection vulnerability in the WEC Map wecmap extension before 3.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-6296

Summary: The WEC Map (wec_map) TYPO3 extension is affected by CVE-2014-6295 (SQL Injection) and CVE-2014-6296 (XSS) in versions up to 3.0.2/3.0.2. The described XSS allows remote injection of script via unspecified vectors; in some sources, 3.0.3 is the fixed release. Root cause: improper input h...

CVE-2014-6295

The CVE-2014-6295 case concerns the WEC Map (wec_map) extension for TYPO3. Affected versions include 3.0.2 and earlier, with vulnerabilities described as SQL Injection (and related Cross‑Site Scripting) that allow remote execution of arbitrary SQL commands via unspecified vectors. Remediation is ...