Vulnerabilities

TI-2014-03052 CVE-2014-3759 · GHSA-3m95-7rcm-xpxr

Multiple SQL injection vulnerabilities in the BibTex Publications (si_bibtex) extension…

LOW 35

Multiple SQL injection vulnerabilities in the BibTex Publications (si_bibtex) extension 0.2.3 for TYPO3 allow remote attackers to execute arbitrary SQL commands via vectors related to the (1) search or (2) list functiona…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01223 Published 2014-05-16 No fix listed CWE-89

TI-2014-03051 CVE-2014-3758 · GHSA-63fp-m4v5-qwjh

Cross-site scripting (XSS) vulnerability in the BibTex Publications (si_bibtex) extension…

LOW 22

Cross-site scripting (XSS) vulnerability in the BibTex Publications (si_bibtex) extension 0.2.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via vectors related to the import functionality.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01161 Published 2014-05-16 No fix listed CWE-79

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in the BibTex Publications (si_bibtex) extension…

Cross-site scripting (XSS) vulnerability in the BibTex Publications (si_bibtex) extension…