Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

georgringer/news

2 known vulnerabilities (1 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 1 high
Registry
Packagist

Advisories 2

  • SQL Injection in extension "News system" (news)

    Affected: from 14.0.0, fixed in 14.0.3; from 13.0.0, fixed in 13.0.2; from 12.0.0, fixed in 12.3.2; from 11.0.0, fixed in 11.4.4; fixed in 10.0.4; from 12.0.0, fixed in 12.3.2; from 13.0.0, fixed in 13.0.2; from 14.0.0, fixed in 14.0.3; fixed in 10.0.4; from 11.0.0, fixed in 11.4.4.

  • SQL injection vulnerability in the News system (news) extension before 1.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL…

    Affected: fixed in 1.3.3.