CVE-2015-1405

CVE-2015-1405 affects the TYPO3 Content Rating Extbase extension (component: content_rating_extbase) for TYPO3, specifically versions 2.0.3 and earlier. The weakness is an SQL injection vulnerability that allows a remote attacker to execute arbitrary SQL commands via unspecified vectors. The rela...

CVE-2015-1403

SQL injection vulnerability in the Content Rating extension 1.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

TYPO3 Content Rating Cross-Site Scripting Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the Swiss TYPO3 Association. A cross-site scripting vulnerability exists in TYPO3 Content Rating, which could be exploited by attackers to conduct cross-site attacks and steal cookie-based authentication...

Multiple Input Validation Vulnerabilities in TYPO3 Content Rating Extbase Extension

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the Swiss TYPO3 Association. Multiple input validation vulnerabilities exist in the TYPO3 Content Rating Extbase Extension, which can be exploited by attackers to steal cookie-based authentication credential...

TYPO3 Content Rating SQL Injection Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the Swiss TYPO3 Association. TYPO3 Content Rating suffers from a SQL injection vulnerability because it fails to properly filter user-supplied input. An attacker could exploit the vulnerability to compromise...

Multiple vulnerabilities in Content Rating Extbase (content_rating_extbase)

It has been discovered that the extension "Content Rating Extbase" contentratingextbase is susceptible to Cross-Site Scripting and SQL Injection. Release Date: January 9, 2015 Bulletin Update: February 23, 2015 added CVEs Component Type: Third party extension. This extension is not a part of the...

Multiple vulnerabilities in Content Rating (content_rating)

It has been discovered that the extension "Content Rating" contentrating is susceptible to Cross-Site Scripting and SQL Injection. Release Date: January 9, 2015 Bulletin Update: February 23, 2015 added CVEs Component Type: Third party extension. This extension is not a part of the TYPO3 default...

mambo4521.php.txt

!/usr/bin/php -q Mambo 4.5.2.1 + mysql 4.1 fetch password hash by pokleyzz fetch password hash by pokleyzz content rating using sub query to select from mosusers Requirement: PHP 4.x with curl extension Description: The problem occur because $userrating variable is not properly sanitize when for...

Mambo 4.5.2.1 Fetch Password Hash Remote Exploit

Exploit for unknown platform in category web applications ================================================ Mambo 4.5.2.1 Fetch Password Hash Remote Exploit ================================================ !/usr/bin/php -q Mambo 4.5.2.1 + mysql 4.1 fetch password hash by pokleyzz fetch password ha...