Lucene search
+L

3 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/06/16 12:00 a.m.•6 views

CVE-2015-4613: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the backend module in the Developer Log devlog extension before 2.11.4 for TYPO3 allows remote editors to execute arbitrary SQL commands via unspecified vectors...

6.5CVSS6.4AI score0.00862EPSS
SaveExploits0References2
CVE
CVE
•added 2010/01/15 7:00 p.m.•58 views

CVE-2010-0326

CVE-2010-0326 is an XSS in the TYPO3 Devlog extension (version 2.9.1 and earlier). Remote attackers could inject arbitrary web script/HTML via unspecified vectors. Affected: TYPO3 Devlog, 2.9.1 and earlier. The connected sources confirm the description but do not provide concrete exploit details,...

4.3CVSS5.9AI score0.01022EPSS
SaveExploits0References3Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/01/15 12:00 a.m.•4 views

CVE-2010-0326: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Developer log devlog extension 2.9.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6AI score0.01022EPSS
SaveExploits0References2
Rows per page
Query Builder