Priority LOW 35
SQL injection vulnerability in the Diocese of Portsmouth Database (pd_diocesedatabase) extension before 0.7.13 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01096 · Published 2010-03-19 · No fix listed CWE-89
Priority LOW 35
SQL injection vulnerability in the Parish Administration Database (ste_parish_admin) extension 0.1.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01013 · Published 2009-12-22 · No fix listed CWE-89
Priority LOW 22
Cross-site scripting (XSS) vulnerability in the Parish Administration Database (ste_parish_admin) extension 0.1.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vecto…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.00855 · Published 2009-12-22 · No fix listed CWE-79
Priority LOW 35
SQL injection vulnerability in the Parish of the Holy Spirit Religious Art Gallery (hs_religiousartgallery) extension 0.1.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01013 · Published 2009-12-22 · No fix listed CWE-89
Priority LOW 22
Cross-site scripting (XSS) vulnerability in the Parish of the Holy Spirit Religious Art Gallery (hs_religiousartgallery) extension 0.1.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTM…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.00855 · Published 2009-12-22 · No fix listed CWE-79
Priority LOW 22
Cross-site scripting (XSS) vulnerability in the Diocese of Portsmouth Resources Database (pd_resources) extension 0.1.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.00855 · Published 2009-12-22 · No fix listed CWE-79
Priority LOW 35
SQL injection vulnerability in the Diocese of Portsmouth Resources Database (pd_resources) extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01013 · Published 2009-12-22 · No fix listed CWE-89
Priority LOW 22
Cross-site scripting (XSS) vulnerability in the Random Prayer 2 (ste_prayer2) extension 0.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.00855 · Published 2009-12-22 · No fix listed CWE-79
Priority LOW 36
SQL injection vulnerability in the Random Prayer 2 (ste_prayer2) extension 0.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01511 · Published 2009-12-22 · No fix listed CWE-89
Priority LOW 35
SQL injection vulnerability in Random Prayer (ste_prayer) 0.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01063 · Published 2009-04-10 · No fix listed CWE-89
Priority LOW 35
SQL injection vulnerability in Diocese of Portsmouth Training Courses (pd_trainingcourses) extension 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01063 · Published 2009-04-10 · No fix listed CWE-89
Priority LOW 35
SQL injection vulnerability in the Diocese of Portsmouth Church Search (pd_churchsearch) extension before 0.1.1, and 0.2.10 and earlier 0.2.x versions, an extension for TYPO3, allows remote attackers to execute arbitrary…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01051 · Published 2009-03-13 · No fix listed CWE-89
Priority LOW 35
SQL injection vulnerability in the Random Prayer 2 (ste_prayer2) extension before 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01063 · Published 2009-03-13 · No fix listed CWE-89