Lucene search
PRIOn knowledge basePRION:CVE-2014-7200HistoryOct 10, 2014 - 2:55 p.m.
Cross site scripting
2014-10-1014:55:00
PRIOn knowledge base
www.prio-n.com
5
Cross-site scripting (XSS) vulnerability in pi1/class.tx_dmmjobcontrol_pi1.php in the JobControl (dmmjobcontrol) extension 2.14.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via the tx_dmmjobcontrol_pi1[search][keyword] parameter to jobs/.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dmmjobcontrol | le | 2.14.0 |
References
packetstormsecurity.com/files/128446/Typo3-JobControl-2.14.0-Cross-Site-Scripting-SQL-Injection.html
seclists.org/fulldisclosure/2014/Sep/89
typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-012
www.securityfocus.com/bid/70155
www.mogwaisecurity.de/advisories/MSA-2014-02.txt
Related
cvelist
cvelist
CVE-2014-7200
2014-10-10 14:00:00
cve
cve
CVE-2014-7200
2014-10-10 14:55:09
nvd
nvd
CVE-2014-7200
2014-10-10 14:55:09
typo3
typo3
Several vulnerabilities in extension JobControl (dmmjobcontrol)
2014-09-25 00:00:00