Vulnerabilities for Wec discussion forum (...) - CXSECURITY.COM

Vulnerabilities for 'Wec discussion forum'

2009-02-16

CVE-2008-6145

CWE-89

Multiple SQL injection vulnerabilities in the WEC Discussion Forum (wec_discussion) extension 1.7.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVE-2008-6144

CWE-79

Multiple cross-site scripting (XSS) vulnerabilities in the WEC Discussion Forum (wec_discussion) extension 1.7.0 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-3029.

2008-07-07

CVE-2008-3043

CWE-noinfo

Unspecified vulnerability in the WEC Discussion Forum (wec_discussion) extension 1.6.2 and earlier for TYPO3 allows attackers to execute arbitrary code via vectors related to "certain file types."

CVE-2008-3029

CWE-79

Cross-site scripting (XSS) vulnerability in the WEC Discussion Forum (wec_discussion) extension 1.6.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

>>> Vendor: Typo3 76 Products

Sr feuser register extension

Air filemanager

Kj imagelightbox2

Wec discussion forum

Address directory

Dam frontend extension

News calendar extension

Industry database extension

Packman extension

Kb unpack extension

Pdf generator 2 extension

Pinboard extension

Sql frontend extension

Branchenbuch extension

Support view extension

Codeon petition extension

Secure directory

Frontend users view

Mannschaftsliste

Page improvements

Another backend login

File list extension

Commerce extension

Eluna page comments extension

Advcalendar extension

Cms poll system extension

Wir ber uns extension

Dictionary extension

Freecap captcha extension

Sb universal plugin

Tu-clausthal odin

Tu-clausthal staff

Pmk rssnewsexport extension

Kiddog mysqldumper

Dl3 tt news alerts

Zak store management

Mimi tipfriends

Industry database

Copyright 2024, cxsecurity.com