EUVD-2010-1038

Malware in sbrugna...

CVE-2010-1004

SQL injection vulnerability in the Yet another TYPO3 search engine YATSE extension before 0.3.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-1005

Cross-site scripting XSS vulnerability in the Yet another TYPO3 search engine YATSE extension before 0.3.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-1005

Cross-site scripting XSS vulnerability in the Yet another TYPO3 search engine YATSE extension before 0.3.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Sql injection

SQL injection vulnerability in the Yet another TYPO3 search engine YATSE extension before 0.3.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-1004

SQL injection vulnerability in the Yet another TYPO3 search engine YATSE extension before 0.3.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-1005

The CVE-2010-1005 issue concerns the Yet another TYPO3 search engine (YATSE) extension for TYPO3, with XSS in versions prior to 0.3.2. Affected component: YATSE extension (TYPO3). Root cause and exact vectors are not detailed in the provided documents; exploitation specifics are not described. Im...

CVE-2010-1004

CVE-2010-1004 affects the Yet another TYPO3 search engine (YATSE) extension for TYPO3, up to version 0.3.1. The vulnerability is a SQL injection in an unspecified vector that could allow remote attackers to execute arbitrary SQL commands. The fixed version is 0.3.2. If exploited, the impact would...