Page 62 of 441 results (0.002 seconds)

CVSS: 7.5EPSS: 0%CPEs: 65EXPL: 0

CVE-2010-0329

https://notcve.org/view.php?id=CVE-2010-0329

SQL injection vulnerability in the powermail extension 1.5.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to the "SQL selection field" and "typoscript." Vulnerabilidad de inyección SQL en la extensión de TYPO3 powermail v1.5.1 y anteriores permite a atacantes remotos ejecutar comandos SQL a través de vectores no especificados relacionados con "typoscript" y el campo "de selección SQL". • http://secunia.com/advisories/38167 http://typo3.org/extensions/repository/view/powermail/1.5.2 http://typo3.org/extensions/repository/view/powermail/1.5.2/info/changelog.txt http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0

CVE-2010-0330

https://notcve.org/view.php?id=CVE-2010-0330

SQL injection vulnerability in the Googlemaps for tt_news (jf_easymaps) extension 1.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Vulnerabilidad de inyección SQL en el en la extensión de TYPO3 "Googlemaps para tt_news" (jf_easymaps) v1.0.2 y anteriores permite a atacantes remotos ejecutar comandos SQL a través de vectores no especificados. • http://typo3.org/extensions/repository/view/jf_easymaps/1.0.3 http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0

CVE-2010-0331

https://notcve.org/view.php?id=CVE-2010-0331

Cross-site scripting (XSS) vulnerability in the TV21 Talkshow (tv21_talkshow) extension 1.0.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de ejecución de comandos en sitios cruzados(XSS) en la extensión de TYPO3 "Talkshow TV21" (tv21_talkshow) v1.0.1 y anteriores permite a atacantes remotos inyectar HTML o scripts web a través de vectores no especificados. • http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0

CVE-2010-0332

https://notcve.org/view.php?id=CVE-2010-0332

SQL injection vulnerability in the TV21 Talkshow (tv21_talkshow) extension 1.0.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Vulnerabilidad de inyección SQL en la extensión de TYPO3 "Talkshow TV21"(tv21_talkshow) v1.0.1 y anteriores permite a atacantes remotos ejecutar comandos SQL a través de vectores no especificados. • http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 7.5EPSS: 0%CPEs: 10EXPL: 0

CVE-2010-0333

https://notcve.org/view.php?id=CVE-2010-0333

SQL injection vulnerability in the Helpdesk (mg_help) extension 1.1.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Vulnerabilidad de inyección SQL en la extensión de HelpDesk de TYPO3 (mg_help) v1.1.6 y anteriores permite a atacantes remotos ejecutar comandos SQL a través de vectores no especificados. • http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •