TYPO3 vulnerable to Cross-Site Scripting in the textarea view helper

TYPO3 before 4.3.4 and 4.4.x before 4.4.1 allows XSS in the textarea view helper in an extbase extension...

GHSA-P78X-93MQ-QWQH TYPO3 vulnerable to Cross-Site Scripting in the textarea view helper

TYPO3 before 4.3.4 and 4.4.x before 4.4.1 allows XSS in the textarea view helper in an extbase extension...

TYPO3 Content Rating Extbase Extension SQL Injection Vulnerability

TYPO3 is a content management system based on PHP4/PHP5+MYsql. TYPO3 Content Rating Extbase Extension suffers from a SQL injection vulnerability due to the program's failure to adequately filter user-supplied data before it is used in SQL queries. An attacker can exploit the vulnerability to...

Sql injection

SQL injection vulnerability in the Content Rating Extbase extension 2.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2015-5270

Name of the Vulnerable Software and Affected Versions TYPO3 Content Rating Extbase extension versions 2.0.3 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions 2.0.3 and...

PT-2015-5271

Name of the Vulnerable Software and Affected Versions TYPO3 Content Rating Extbase extension versions 2.0.3 and earlier Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions 2.0.3 and earlier, update to a version later than 2.0.3...

PT-2014-7133

Name of the Vulnerable Software and Affected Versions yag extension versions prior to 3.0.1 pt extbase extension versions prior to 1.5.1 Description The issue allows remote attackers to bypass access restrictions and execute arbitrary controller actions. Recommendations For yag extension versions...