Vulnerabilities

TI-2010-02043 CVE-2010-2131 · GHSA-77v2-jp97-h89m

SQL injection vulnerability in the Calendar Base (cal) extension before 1.3.2 for TYPO3…

LOW 36

SQL injection vulnerability in the Calendar Base (cal) extension before 1.3.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via iCalendar data.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0174 Published 2010-06-02 No fix listed CWE-89

TI-2009-04560 CVE-2009-4804 · GHSA-pj5p-vp8q-c483

Cross-site scripting (XSS) vulnerability in the Calendar Base (cal) extension before…

LOW 22

Cross-site scripting (XSS) vulnerability in the Calendar Base (cal) extension before 1.1.1 for TYPO3, when Internet Explorer 6 is used, allows remote attackers to inject arbitrary web script or HTML via "search parameter…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01033 Published 2010-04-23 No fix listed CWE-79

TI-2009-03943 CVE-2009-4158 · GHSA-66wv-fj93-cr23

SQL injection vulnerability in the Calendar Base (cal) extension before 1.2.1 for TYPO3…

LOW 35

SQL injection vulnerability in the Calendar Base (cal) extension before 1.2.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01063 Published 2009-12-02 No fix listed CWE-89

Vulnerabilities

Filters

SQL injection vulnerability in the Calendar Base (cal) extension before 1.3.2 for TYPO3…

Cross-site scripting (XSS) vulnerability in the Calendar Base (cal) extension before…

SQL injection vulnerability in the Calendar Base (cal) extension before 1.2.1 for TYPO3…