EUVD-2008-5770

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in the Wir ber uns fsmipeople extension 0.0.24 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-5800

CVE-2008-5800 refers to a SQL injection vulnerability in the TYPO3 extension fsmi_people (Wir ber uns) version 0.0.24 and earlier. The flaw allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The NVD entry lists a Base Score of 7.5 (HIGH) with network attack vector,...

CVE-2008-5799

Cross-site scripting XSS vulnerability in the Wir ber uns fsmipeople extension 0.0.24 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-5799

CVE-2008-5799 is an XSS vulnerability in the TYPO3 extension Wir ber uns (fsmi_people) version 0.0.24 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. According to NVD, the impact is partial integrity with no confidentiality/availabili...

TYPO3 Security Bulletin

Several vulnerabilities have been found in the following third party TYPO3 extensions: "advcalendar" advCalendar, "CMS Poll system" cmspoll, "eLuna Page Comments" elunapagecomments, "Wir ber uns" sic fsmipeople, "Dictionary" rtgdictionary Please read first: This Collective Security Bulletin CSB i...