CVE-2012-3530

Incomplete blacklist vulnerability in the t3libdiv::quoteJSvalue API function in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote attackers to conduct cross-site scripting XSS attacks via certain HTML5 JavaScript events...

CVE-2012-3530

CVE-2012-3530 affects TYPO3 core components: an incomplete blacklist in t3lib_div::quoteJSvalue allows remote XSS via certain HTML5 JavaScript events. Affected versions are TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12, and 4.7.x before 4.7.4. The vulnerability arises from insufficient sanitizat...

[SECURITY] [DSA 2537-1] typo3-src security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2537-1 [email protected] http://www.debian.org/security/ Florian Weimer August 30, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2537-1] typo3-src security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2537-1 [email protected] http://www.debian.org/security/ Florian Weimer August 30, 2012 http://www.debian.org/security/faq -...