CVE-2009-4340

The CVE-2009-4340 entry describes a Cross-site scripting (XSS) vulnerability in the TYPO3 extension No indexed Search (no_indexed_search) version 0.2.0. The issue allows remote attackers to inject arbitrary web script or HTML, via unspecified vectors. The vulnerability is tied to TYPO3’s no_index...

CVE-2009-4341

CVE-2009-4341 : A SQL injection vulnerability exists in the TYPO3 extension “no_indexed_search” version 0.2.0, allowing remote attackers to execute arbitrary SQL commands via unknown vectors. The NVD entries corroborate an ARBITRARY SQL execution risk with network access and no authentication req...