EUVD-2014-6127

Malware in sbrugna...

TYPO3 wt_directory extension SQL injection vulnerability

TYPO3 is a free and open source content management system. wtdirectory is an extension plugin capable of displaying addresses from the ttaddress list. A SQL injection vulnerability exists in TYPO3 wtdirectory, which allows remote attackers to exploit the vulnerability to submit specially crafted...

CVE-2015-4609

SQL injection vulnerability in the wtdirectory extension before 1.4.2 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-4609

CVE-2015-4609 concerns a SQL injection in the TYPO3 wt_directory extension prior to 1.4.2. The vulnerability allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Affected component: TYPO3 wt_directory (extension). Root cause: unsafe handling of SQL queries ...

CVE-2015-4609

SQL injection vulnerability in the wtdirectory extension before 1.4.2 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-4609: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the wtdirectory extension before 1.4.2 for TYPO3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

SQL Injection vulnerability in extension wt_directory (wt_directory)

It has been discovered that the extension "wtdirectory" wtdirectory is susceptible to SQL Injection Release Date: June 15, 2015 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.4.1 and below Vulnerability Type: SQL...

CVE-2014-6241

SQL injection vulnerability in the wtdirectory extension before 1.4.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the wtdirectory extension before 1.4.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-6241

The CVE-2014-6241 entry concerns the TYPO3 wt_directory extension. Affected version: wt_directory before 1.4.1. Issue: SQL injection allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. Impact as stated is arbitrary SQL execution. Remediation: update to wt_director...

CVE-2014-6241

SQL injection vulnerability in the wtdirectory extension before 1.4.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-6241

SQL injection vulnerability in the wtdirectory extension before 1.4.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-6241: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the wtdirectory extension before 1.4.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Several vulnerabilities in third party extensions

Several vulnerabilities have been found in the following third-party TYPO3 extensions: cwtfeedit, euldap, flatmgr, jhopengraphprotocol, kedompdf, lumophpinclude, newspack, sbakronymmanager, staddressma, weeaargooglesitemap,. wtdirectory Release Date: September 02, 2014 Bulletin update: September ...