TYPO3 Formhandler Extension Cross-Site Scripting Vulnerability

TYPO3 is a Swiss TYPO3 Association maintains a free and open source content management system framework CMS/CMF. formhandler is one of the Web development form Form module extension plug-in . A cross-site scripting vulnerability exists in versions 2.3.1 and 2.0.2 of the TYPO3 Formhandler extensio...

PT-2013-2031

Name of the Vulnerable Software and Affected Versions TYPO3 Formhandler extension versions prior to 1.4.1 Description The issue allows remote authenticated users with certain permissions to execute arbitrary SQL commands. Recommendations For versions prior to 1.4.1, update to version 1.4.1 or lat...