CVE-2021-28381

CVE-2021-28381 : The vhs (VHS: Fluid ViewHelpers) extension for TYPO3 is vulnerable to SQL injection via isLanguageViewHelper in versions before 5.1.1. The issue stems from improper validation of input in the isLanguageViewHelper, enabling attackers to potentially access database information. The...

CVE-2021-28381

The vhs aka VHS: Fluid ViewHelpers extension before 5.1.1 for TYPO3 allows SQL injection via isLanguageViewHelper...

SQL Injection in extension "VHS: Fluid ViewHelpers" (vhs)

It has been discovered that the extension is susceptible to blind SQL Injection when user input is passed to the isLanguageViewHelper...

CVE-2021-28381: Improper Neutralization of Special Elements used in an SQL Command

The vhs aka VHS: Fluid ViewHelpers extension before 5.1.1 for TYPO3 allows SQL injection via isLanguageViewHelper...

PT-2021-17856

Name of the Vulnerable Software and Affected Versions: vhs extension versions prior to 5.1.1 for TYPO3 Description: The issue allows SQL injection via the isLanguageViewHelper. There is no information provided about the estimated number of potentially affected devices worldwide or real-world...

vhs-perchtoldsdorf.at Cross Site Scripting vulnerability OBB-1391037

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

vhs-servicecenter.de Cross Site Scripting vulnerability OBB-1332743

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

vhs-roehrmoos.de Cross Site Scripting vulnerability OBB-1194658

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

vhs-augsburg.de Cross Site Scripting vulnerability OBB-1194657

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

schiller-vhs.de XSS vulnerability

Open Bug Bounty ID: OBB-696422 Description| Value ---|--- Affected Website:| schiller-vhs.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

vhs-tirol.at XSS vulnerability

Open Bug Bounty ID: OBB-623561 Description| Value ---|--- Affected Website:| vhs-tirol.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

vhs-gelderland.de XSS vulnerability

Open Bug Bounty ID: OBB-581160 Description| Value ---|--- Affected Website:| vhs-gelderland.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

vhs-hannover.de XSS vulnerability

Open Bug Bounty ID: OBB-574640 Description| Value ---|--- Affected Website:| vhs-hannover.de Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

vhs-hannover.de XSS vulnerability

Open Bug Bounty ID: OBB-551790 Description| Value ---|--- Affected Website:| vhs-hannover.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure bas...

vhs-bremen.de XSS vulnerability

Open Bug Bounty ID: OBB-432448 Description| Value ---|--- Affected Website:| vhs-bremen.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

vhs-swiss.com XSS vulnerability

Vulnerable URL: http://vhs-swiss.com/main.php?id=services"'--!confirmOPENBUGBOUNTY//...

vhs-augsburg.de XSS vulnerability

Vulnerable URL: https://www.vhs-augsburg.de/suche?useraction=search=%3Cimg%20src%3Dx%20onerror%3Dprompt%2FOPENBUGBOUNTY%2F%3E=1 Details: Description| Value ---|--- Patched:| Yes, at 09.06.2017 Latest check for patch:| 09.06.2017 12:50 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

vhs-slovenia.com XSS vulnerability

Vulnerable URL: http://www.vhs-slovenia.com/main.php/'"--! Details: Description| Value ---|--- Patched:| Yes, at 01.03.2017 Latest check for patch:| 01.03.2017 07:49 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9666843 VIP website status:| No Check...

Vintage Retro Camera + VHS - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Vintage Retro Camera + VHS published at the 'play' market has multiple vulnerabilities...

Camcorder - VHS Home Videos - Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Camcorder - VHS Home Videos published at the 'play' market has multiple vulnerabilities...