EUVD-2010-4855

Malware in sbrugna...

EUVD-2010-4854

Malware in sbrugna...

CVE-2010-4891

SQL injection vulnerability in the Yet Another Calendar keyac extension before 1.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-4891

SQL injection vulnerability in the Yet Another Calendar keyac extension before 1.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-4890

Cross-site scripting XSS vulnerability in the Yet Another Calendar keyac extension before 1.1.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Yet Another Calendar keyac extension before 1.1.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Sql injection

SQL injection vulnerability in the Yet Another Calendar keyac extension before 1.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-4891

SQL injection vulnerability in the Yet Another Calendar keyac extension before 1.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-4891

Vulnerability: The TYPO3 extension ke_yac (Yet Another Calendar) is affected by a SQL injection in versions before 1.1.2. Root cause per sources: improper handling of input in the extension allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Impact: remote exploitat...

CVE-2010-4890

CVE-2010-4890 affects the TYPO3 extension ke_yac (Yet Another Calendar) version prior to 1.1.2. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The available sources indicate the affected component...

CVE-2010-4891: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Yet Another Calendar keyac extension before 1.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2011-1825

Name of the Vulnerable Software and Affected Versions Yet Another Calendar ke yac extension for TYPO3 versions prior to 1.1.2 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 1.1.2, update to version...

CVE-2010-4890: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Yet Another Calendar keyac extension before 1.1.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...