Vulnerabilities > Andreas Kiefer

DATE CVE VULNERABILITY TITLE RISK
2011-10-07 CVE-2010-4891 SQL Injection vulnerability in Andreas Kiefer KE YAC
SQL injection vulnerability in the Yet Another Calendar (ke_yac) extension before 1.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
network
low complexity
andreas-kiefer typo3 CWE-89
7.5
7.5
2011-10-07 CVE-2010-4890 Cross-Site Scripting vulnerability in Andreas Kiefer KE YAC
Cross-site scripting (XSS) vulnerability in the Yet Another Calendar (ke_yac) extension before 1.1.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. 		4.3
4.3