CVE-2011-3584

The TYPO3 Core wecdiscussion extension before 2.1.1 is vulnerable to SQL Injection due to improper sanitation of user-supplied input...

CVE-2011-3584

The TYPO3 Core wecdiscussion extension before 2.1.1 is vulnerable to SQL Injection due to improper sanitation of user-supplied input...

CVE-2011-3584

The TYPO3 Core wecdiscussion extension before 2.1.1 is vulnerable to SQL Injection due to improper sanitation of user-supplied input...

Sql injection

The TYPO3 Core wecdiscussion extension before 2.1.1 is vulnerable to SQL Injection due to improper sanitation of user-supplied input...

CVE-2011-3584

CVE-2011-3584 affects the TYPO3 Core wec_discussion extension prior to 2.1.1. The vulnerability is an SQL Injection caused by improper sanitation of user-supplied input. Impact is partial to full data exposure/ manipulation depending on context (per documented references). Remediation: upgrade to...

CVE-2011-3584

The TYPO3 Core wecdiscussion extension before 2.1.1 is vulnerable to SQL Injection due to improper sanitation of user-supplied input...

CVE-2011-3584: Improper Neutralization of Special Elements used in an SQL Command

The TYPO3 Core wecdiscussion extension before 2.1.1 is vulnerable to SQL Injection due to improper sanitation of user-supplied input...

Several vulnerabilities in third party extensions

Several vulnerabilities have been found in the following third-party TYPO3 extensions: fed, myquizpoll, push2rss3ds, slideshare, wecdiscussion Release Date: February 19, 2013 Please read first: This Collective Security Bulletin CSB is a listing of vulnerable extensions with neither significant...

CVE-2011-1722: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in WEC Discussion Forum wecdiscussion extension 2.1.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild in April 2011...

CVE-2008-6144: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the WEC Discussion Forum wecdiscussion extension 1.7.0 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-3029...

CVE-2008-6145: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the WEC Discussion Forum wecdiscussion extension 1.7.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-3043: Improper Control of Generation of Code

Unspecified vulnerability in the WEC Discussion Forum wecdiscussion extension 1.6.2 and earlier for TYPO3 allows attackers to execute arbitrary code via vectors related to "certain file types."...