CVE-2013-5100

Cross-site scripting XSS vulnerability in the Static Methods since 2007 div2007 extension before 0.10.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the t3libdiv::quoteJSvalue function...

CVE-2013-5100

The CVE documents a Cross-site Scripting (XSS) vulnerability in the Static Methods since 2007 (div2007) extension for TYPO3 . The issue affects the extension version prior to 0.10.2 and is related to the function t3lib_div::quoteJSvalue , enabling remote attackers to inject arbitrary script/HTML ...

PT-2013-5365

Name of the Vulnerable Software and Affected Versions TYPO3 extension div2007 versions prior to 0.10.2 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is related to the t3lib div::quoteJSvalue function. Recommendations For...

Several vulnerabilities in third party extensions

Several vulnerabilities have been found in the following third-party TYPO3 extensions: news, onetimeaccount, phpunit, div2007, t3mootools, t3jquery, oneclicklogin Release Date: January 11, 2013 Please read first: This Collective Security Bulletin CSB is a listing of vulnerable extensions with...