CVE-2009-4158

CVE-2009-4158 : A SQL injection vulnerability exists in the TYPO3 Calendar Base (cal) extension before 1.2.1, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. Affects the TYPO3 Calendar Base extension up to version 1.2.0. Root cause is improper handling of user...

CVE-2010-2131

CVE-2010-2131 affects the TYPO3 Calendar Base (cal) extension prior to 1.3.2. The vulnerability allows remote attackers to execute arbitrary SQL commands via iCalendar data, due to an SQL injection in the cal extension. In public records (NVD) the issue is rated HIGH (CVSS v2: 7.5) with network a...