Session fixation

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS on the Extension Manager...

CVE-2010-3665

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS on the Extension Manager...

CVE-2010-3665

TYPO3 prior to 4.1.14, 4.2.x prior to 4.2.13, 4.3.x prior to 4.3.4, and 4.4.x prior to 4.4.1 allows XSS in the Extension Manager due to insufficient validation of client-side data. This vulnerability can enable a reflected/stored XSS scenario as described in CVE-2010-3665. The issue affects the E...

CVE-2010-3665

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS on the Extension Manager...

CVE-2010-3659

Multiple cross-site scripting XSS vulnerabilities in TYPO3 CMS 4.1.x before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4, and 4.4.x before 4.4.1 allow remote authenticated backend users to inject arbitrary web script or HTML via unspecified parameters to the extension manager, or unspecified...

CVE-2010-3659

Multiple cross-site scripting XSS vulnerabilities in TYPO3 CMS 4.1.x before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4, and 4.4.x before 4.4.1 allow remote authenticated backend users to inject arbitrary web script or HTML via unspecified parameters to the extension manager, or unspecified...

CVE-2010-3659

Multiple cross-site scripting XSS vulnerabilities in TYPO3 CMS 4.1.x before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4, and 4.4.x before 4.4.1 allow remote authenticated backend users to inject arbitrary web script or HTML via unspecified parameters to the extension manager, or unspecified...

Multiple vulnerabilities in extension "phpMyAdmin" (phpmyadmin)

It has been discovered that the extension "phpMyAdmin" phpmyadmin has multiple vulnerabilities. Release Date: September 29, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: 5.1.6 and below Vulnerability Type: Multiple...

Arbitrary Code Execution in extension "Frontend User Registration" (sf_register)

Release Date: September 12, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 6.2.8 and below Vulnerability Type: Arbitrary Code Execution Severity: High Suggested CVSS v2.0:...

CVE-2016-4165

The extension manager in Adobe Brackets before 1.7 allows attackers to have an unspecified impact via invalid input...

CVE-2016-4165

The extension manager in Adobe Brackets before 1.7 allows attackers to have an unspecified impact via invalid input...

Input validation

The extension manager in Adobe Brackets before 1.7 allows attackers to have an unspecified impact via invalid input...

CVE-2016-4165

Adobe Brackets is affected by CVE-2016-4165 in the extension manager prior to v1.7, where invalid input can lead to an unspecified impact. Connected sources also reference CVE-2016-4164 and note a security update (APS B16-20) that resolves both CVE-2016-4164 and CVE-2016-4165; users should apply ...

CVE-2016-4165

The extension manager in Adobe Brackets before 1.7 allows attackers to have an unspecified impact via invalid input...

APSB16-20 Security update available for Adobe Brackets

Adobe has released a security update for Adobe Brackets for Windows, Macintosh and Linux. This update resolves a JavaScript injection vulnerability CVE-2016-4164 and a vulnerability in the extension manager CVE-2016-4165. Adobe recommends users update their product installation using the...

Multiple vulnerabilities in extension "Fe user statistic" (festat)

It has been discovered that the extension "Fe user statistic" festat is susceptible to Cross-Site Scripting, Insecure Unserialize and Information Disclosure. Release Date: March 03, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affecte...

TYPO3 Extension Manager Cross-Site Scripting Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the TYPO3 Association in Switzerland.Extension Manager is one of the extension managers. A cross-site scripting vulnerability exists in Extension Manager in TYPO3 versions 6.2.x before 6.2.16 and 7.x before...

CVE-2015-8757

Cross-site scripting XSS vulnerability in the Extension Manager in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to extension data during an extension installation...

Cross site scripting

Cross-site scripting XSS vulnerability in the Extension Manager in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to extension data during an extension installation...

CVE-2015-8757

Cross-site scripting XSS vulnerability in the Extension Manager in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to extension data during an extension installation...