CVE-2013-4744

Cross-site scripting XSS vulnerability in the PHPUnit extension before 3.5.15 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4744

The CVE-2013-4744 entry concerns a Cross-site Scripting (XSS) vulnerability in the TYPO3 ecosystem's PHPUnit extension. Affected component: the PHPUnit extension used with TYPO3, versions before 3.5.15. Root cause is not detailed in the provided documents beyond the XSS claim; vectors are describ...

PT-2013-5171

Name of the Vulnerable Software and Affected Versions TYPO3 PHPUnit extension versions prior to 3.5.15 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 3.5.15, update to version 3.5.15 or later to...

CVE-2013-4744: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the PHPUnit extension before 3.5.15 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Several vulnerabilities in third party extensions

Several vulnerabilities have been found in the following third-party TYPO3 extensions: news, onetimeaccount, phpunit, div2007, t3mootools, t3jquery, oneclicklogin Release Date: January 11, 2013 Please read first: This Collective Security Bulletin CSB is a listing of vulnerable extensions with...

CVE-2006-4869: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in phpunity-postcard.php in phpunity.postcard allows remote attackers to execute arbitrary PHP code via a URL in the gallerypath parameter...