Vulnerabilities

TI-2010-04614 CVE-2010-4891 · GHSA-2mvw-pgf2-gf3j

SQL injection vulnerability in the Yet Another Calendar (ke_yac) extension before 1.1.2…

LOW 35

SQL injection vulnerability in the Yet Another Calendar (ke_yac) extension before 1.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01072 Published 2011-10-07 No fix listed CWE-89

TI-2010-04613 CVE-2010-4890 · GHSA-rw3v-x4vx-f5mv

Cross-site scripting (XSS) vulnerability in the Yet Another Calendar (ke_yac) extension…

LOW 22

Cross-site scripting (XSS) vulnerability in the Yet Another Calendar (ke_yac) extension before 1.1.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01042 Published 2011-10-07 No fix listed CWE-79

Vulnerabilities

Filters

SQL injection vulnerability in the Yet Another Calendar (ke_yac) extension before 1.1.2…

Cross-site scripting (XSS) vulnerability in the Yet Another Calendar (ke_yac) extension…