Dmitry Dulepov

**Name of the Vulnerable Software and Affected Versions** TYPO3 extension l10nmgr versions prior to 7.4.0 TYPO3 extension l10nmgr versions 8.x prior to 8.7.0 TYPO3 extension l10nmgr versions 9.x prior to 9.2.0 **Description** The issue allows information disclosure related to translatable fields. **Recommendations** For versions prior to 7.4.0, update to version 7.4.0 or later. For versions 8.x prior to 8.7.0, update to version 8.7.0 or later. For versions 9.x prior to 9.2.0, update to version 9.2.0 or later.

**Name of the Vulnerable Software and Affected Versions** TYPO3 versions 6.2.x through 6.2.15 **Description** A cross-site scripting (XSS) issue exists in the Indexed Search component, specifically in the search result view, allowing remote authenticated editors to inject arbitrary web script or HTML. **Recommendations** For versions 6.2.x through 6.2.15, update to version 6.2.16 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** JobControl (dmmjobcontrol) version 1.15.0 and earlier **Description** A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML. **Recommendations** For JobControl (dmmjobcontrol) version 1.15.0 and earlier, update to a version later than 1.15.0 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** dmmjobcontrol versions 1.15.0 and earlier **Description** The issue allows remote attackers to execute arbitrary SQL commands. **Recommendations** For versions 1.15.0 and earlier, update to a version later than 1.15.0 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** nepa-design.de Spam Protection (nd antispam) extension version 1.0.3 **Description** The issue allows remote attackers to modify configuration via unknown vectors. **Recommendations** For nepa-design.de Spam Protection (nd antispam) extension version 1.0.3, at the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Diocese of Portsmouth Training Courses (pd trainingcourses) extension version 0.1.1 for TYPO3 **Description** The issue allows remote attackers to execute arbitrary SQL commands. **Recommendations** For version 0.1.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TYPO3 extension air filemanager versions 0.6.1 and earlier **Description** The issue allows remote attackers to execute arbitrary commands. The exact vectors used for the attack are not specified. **Recommendations** For versions 0.6.1 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Random Prayer (ste prayer) version 0.0.1 for TYPO3 **Description** The issue allows remote attackers to execute arbitrary SQL commands. **Recommendations** For version 0.0.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Fussballtippspiel (toto) versions 0.1.1 and earlier **Description** The issue allows remote attackers to execute arbitrary SQL commands. **Recommendations** For versions 0.1.1 and earlier, update to a version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** TARGET-E WorldCup Bets (worldcup) versions 2.0.0 and earlier **Description** The issue allows remote attackers to execute arbitrary SQL commands. **Recommendations** For versions 2.0.0 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TARGET-E WorldCup Bets (worldcup) versions 2.0.0 and earlier **Description** A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via unknown vectors, potentially affecting the security of the system. **Recommendations** For versions 2.0.0 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TYPO3 Download system (sb downloader) extension versions 0.1.4 and earlier **Description** A SQL injection issue allows remote attackers to execute arbitrary SQL commands. **Recommendations** For versions 0.1.4 and earlier, update to a version later than 0.1.4 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** CoolURI (cooluri) versions 1.0.11 and earlier **Description** The issue allows remote attackers to execute arbitrary SQL commands. **Recommendations** For CoolURI (cooluri) versions 1.0.11 and earlier, update to a version later than 1.0.11 to resolve the issue.