CVE-2022-31048

TYPO3’s Form Designer backend module of the Form Framework is vulnerable to cross-site scripting. A valid backend user with access to the Form module can exploit it. Affected TYPO3 versions prior to the fixes are 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, and 11.5.11. The problem is fixed in those releas...

CVE-2022-31048 Cross-Site Scripting in Form Framework

TYPO3 is an open source web content management system. Prior to versions 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, and 11.5.11, the Form Designer backend module of the Form Framework is vulnerable to cross-site scripting. A valid backend user account with access to the form module is needed to exploit...

CVE-2022-31048

TYPO3 is an open source web content management system. Prior to versions 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, and 11.5.11, the Form Designer backend module of the Form Framework is vulnerable to cross-site scripting. A valid backend user account with access to the form module is needed to exploit...

PT-2022-20486 · Typo3 · Typo3

Name of the Vulnerable Software and Affected Versions: TYPO3 versions prior to 8.7.47 ELTS TYPO3 versions prior to 9.5.34 ELTS TYPO3 versions prior to 10.4.29 TYPO3 versions prior to 11.5.11 Description: The Form Designer backend module of the Form Framework in TYPO3 is vulnerable to cross-site...

CVE-2022-31048: Improper Neutralization of Input During Web Page Generation

TYPO3 is an open source web content management system. Prior to versions 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, and 11.5.11, the Form Designer backend module of the Form Framework is vulnerable to cross-site scripting. A valid backend user account with access to the form module is needed to exploit...

TYPO3 跨站脚本漏洞

TYPO3 is a free and open source content management system framework CMS/CMF from the Swiss TYPO3 Association. TYPO3 suffers from a cross-site scripting vulnerability that originates in the Form Designer back-end module of Form Framework, which is susceptible to cross-site scripting attacks and...

TYPO3 XSS Vulnerability (TYPO3-CORE-SA-2021-004)

TYPO3 is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:typo3:typo3"; if...

Authorization Bypass

typo3/cms-form is vulnerable to authorization bypass. Due to inadequate validation, attackers can bypass restrictions of predefined options and submit arbitrary data in the Form Designer backend module of the Form Framework...

CVE-2021-21357

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 8.7.40, 9.5.25, 10.4.14, 11.1.1 due to improper input validation, attackers can by-pass restrictions of predefined options and submit arbitrary data in the Form Designer backend module of the Form Framework...

CVE-2021-21358

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 10.4.14, 11.1.1 it has been discovered that the Form Designer backend module of the Form Framework is vulnerable to cross-site scripting. A valid backend user account with access to the form module is needed...

Cross site scripting

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 10.4.14, 11.1.1 it has been discovered that the Form Designer backend module of the Form Framework is vulnerable to cross-site scripting. A valid backend user account with access to the form module is needed...

CVE-2021-21357

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 8.7.40, 9.5.25, 10.4.14, 11.1.1 due to improper input validation, attackers can by-pass restrictions of predefined options and submit arbitrary data in the Form Designer backend module of the Form Framework...

CVE-2021-21358

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 10.4.14, 11.1.1 it has been discovered that the Form Designer backend module of the Form Framework is vulnerable to cross-site scripting. A valid backend user account with access to the form module is needed...

PT-2021-14440 · Typo3 · Typo3

Name of the Vulnerable Software and Affected Versions: TYPO3 versions prior to 8.7.40, 9.5.25, 10.4.14, 11.1.1 Description: The issue arises from improper input validation, allowing attackers to bypass restrictions of predefined options and submit arbitrary data in the Form Designer backend modul...

PT-2021-14441 · Typo3 · Typo3

Name of the Vulnerable Software and Affected Versions: TYPO3 versions prior to 10.4.14 TYPO3 versions prior to 11.1.1 Description: The Form Designer backend module of the Form Framework in TYPO3 is vulnerable to cross-site scripting. A valid backend user account with access to the form module is...

CVE-2021-21357: Improper Input Validation

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 8.7.40, 9.5.25, 10.4.14, 11.1.1 due to improper input validation, attackers can by-pass restrictions of predefined options and submit arbitrary data in the Form Designer backend module of the Form Framework...

CVE-2021-21358: Improper Neutralization of Input During Web Page Generation

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 10.4.14, 11.1.1 it has been discovered that the Form Designer backend module of the Form Framework is vulnerable to cross-site scripting. A valid backend user account with access to the form module is needed...

TYPO3 输入验证错误漏洞

TYPO3 is a free and open source content management system. An access control bypass vulnerability exists in TYPO3 Form Framework, which can be exploited by an attacker to bypass restrictions on submitting arbitrary data to the Form Designer back-end module...

Adobe Form Designer和Form Client多个缓冲区溢出漏洞

BUGTRAQ ID: 28210 CVECAN ID: CVE-2007-6253 Adobe Form Designer是Adobe Designer产品家族的成员，用于自动生成表单、捕获并处理数据。 Adobe Form Designer及其客户端提供了多个ActiveX控件，其中FileDlg.dll库所提供的Adobe File Dialog Button控件和SvrCopy.dll库所提供的Adobe Copy to Server对象中存在缓冲区溢出漏洞。如果用户受骗访问了恶意网页的话，就可能触发这些溢出，导致执行任意指令。 Adobe Form Designer/Clien...

Buffer overflow

Multiple buffer overflows in Adobe Form Designer 5.0 and Form Client 5.0 allow remote attackers to execute arbitrary code via unknown vectors in the 1 Adobe File Dialog Button FileDlg.dll and the 2 Adobe Copy to Server Object SvrCopy.dll ActiveX controls...