9 results (0.002 seconds)

CVSS: 7.5EPSS: 0%CPEs: 9EXPL: 0

CVE-2013-5304

https://notcve.org/view.php?id=CVE-2013-5304

SQL injection vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Vulnerabilidad de inyección SQL en la extensión Store Locator (locator) anterior a v3.1.5 para TYPO3 permite a atacantes remotos ejecutar comandos SQL arbitrarios mediante vectores desconocidos. • http://osvdb.org/95962 http://secunia.com/advisories/54350 http://typo3.org/extensions/repository/view/locator http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-013 http://www.securityfocus.com/bid/61606 https://exchange.xforce.ibmcloud.com/vulnerabilities/86230 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 4.3EPSS: 0%CPEs: 9EXPL: 0

CVE-2013-5305

https://notcve.org/view.php?id=CVE-2013-5305

Cross-site scripting (XSS) vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad Cross-site scripting (XSS) en la extensión Store Locator (locator) anterior a v3.1.5 para TYPO3, permite a atacantes remotos inyectar web scripts arbitrarios o HTML mediante vectores desconocidos. • http://osvdb.org/95961 http://secunia.com/advisories/54350 http://typo3.org/extensions/repository/view/locator http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-013 http://www.securityfocus.com/bid/61606 https://exchange.xforce.ibmcloud.com/vulnerabilities/86231 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 10.0EPSS: 0%CPEs: 9EXPL: 0

CVE-2013-5303

https://notcve.org/view.php?id=CVE-2013-5303

Unspecified vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 has unknown impact and remote attack vectors, related to "Insecure Unserialize." Vulnerabilidad no especificada en la extensión Store Locator (locator) anterior a v 3.1.5 para TYPO3 tiene un impacto desconocido y vectores de ataque remotos, relacionado con "Insecure Unserialize". • http://osvdb.org/95967 http://secunia.com/advisories/54350 http://typo3.org/extensions/repository/view/locator http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-013 http://www.securityfocus.com/bid/61606 https://exchange.xforce.ibmcloud.com/vulnerabilities/86233 •

CVSS: 7.5EPSS: 0%CPEs: 6EXPL: 0

CVE-2010-4950

https://notcve.org/view.php?id=CVE-2010-4950

SQL injection vulnerability in the Event (event) extension before 0.3.7 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Vulnerabilidad de inyección SQL en la extensión Event(event) anterior a v0.3.7 para TYPO3 permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores desconocidos. • http://typo3.org/extensions/repository/view/event/0.3.7 http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 7.5EPSS: 0%CPEs: 5EXPL: 0

CVE-2010-4952

https://notcve.org/view.php?id=CVE-2010-4952

SQL injection vulnerability in the FE user statistic (festat) extension before 0.2.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Vulnerabilidad de inyección SQL en la extensión FE user statistic (festat) anterior a v0.2.4 para TYPO3, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro .$ • http://typo3.org/extensions/repository/view/festat/0.2.4 http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-015 http://www.securityfocus.com/bid/42366 https://exchange.xforce.ibmcloud.com/vulnerabilities/61056 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •