25 June 2013

9 results · Feed

• Unscored —
  CVE-2013-1971

  Cross-site scripting (XSS) vulnerability in the MP3 Player module for Drupal 6.x allows remote authenticated users with…

  Web / CMS
  Jun 25, 2013
• High —
  CVE-2013-4682

  Multishop extension for TYPO3 has SQL Injection vulnerability

  SQL injection vulnerability in the Multishop extension before 2.0.39 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  bvbmedia/multishop Packagist
  Jun 25, 2013
• Unscored —
  CVE-2013-4683

  SQL injection vulnerability in the meta_feedit extension 0.1.10 and earlier for TYPO3 allows remote attackers to execut…

  Jun 25, 2013
• Unscored —
  CVE-2013-4681

  SQL injection vulnerability in the sofortueberweisung2commerce extension before 2.0.1 for TYPO3 allows remote attackers…

  Jun 25, 2013
• Unscored —
  CVE-2013-4680

  Open redirect vulnerability in Maag Form Captcha extension 2.0.0 and earlier for TYPO3 allows remote attackers to redir…

  Jun 25, 2013
• Unscored —
  CVE-2013-2177

  Cross-site scripting (XSS) vulnerability in the Display Suite module 7.x-1.x before 7.x-1.7 and 7.x-2.x before 7.x-2.3 …

  Jun 25, 2013
• Unscored —
  CVE-2012-6573

  Cross-site scripting (XSS) vulnerability in the Apache Solr Autocomplete module 6.x-1.x before 6.x-1.4 and 7.x-1.x befo…

  Jun 25, 2013
• Unscored —
  CVE-2013-4604

  Fortinet FortiOS before 5.0.3 on FortiGate devices does not properly restrict Guest capabilities, which allows remote a…

  Jun 25, 2013
• Unscored —
  CVE-2013-4669

  FortiClient before 4.3.5.472 on Windows, before 4.0.3.134 on Mac OS X, and before 4.0 on Android; FortiClient Lite befo…

  Jun 25, 2013