727 matches found
CVE-2011-0508
CVE-2011-0508 affects Contao CMS 2.9.2 and potentially other versions before 2.9.3. The vulnerability is a cross-site scripting (XSS) flaw where an attacker can inject arbitrary web script or HTML via the HTTP X_FORWARDED_FOR header, which is stored by system/libraries/Environment.php but not pro...
CVE-2011-0508: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in system/modules/comments/Comments.php in Contao CMS 2.9.2, and possibly other versions before 2.9.3, allows remote attackers to inject arbitrary web script or HTML via the HTTP XFORWARDEDFOR header, which is stored by system/libraries/Environment.php but n...
PT-2011-2407
Name of the Vulnerable Software and Affected Versions Contao CMS versions prior to 2.9.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the HTTP X FORWARDED FOR header. This header is stored by system/libraries/Environment.php but n...
[MajorSecurity SA-081]Contao CMS 2.9.2 - Persistent Cross Site Scripting Issue
MajorSecurity SA-081Contao CMS 2.9.2 - Persistent Cross Site Scripting Issue Details ============= Product: Contao CMS 2.9.2 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.contao.org/ Advisory-Status: published Credits ============= Discovered by: David Vieira-Kurz Affected...
Insert tag injection in front end forms
More info at https://contao.org/en/security-advisories/insert-tag-injection-in-forms.html...