5 matches found
CVE-2012-1076
Cross-site scripting XSS vulnerability in the Documents download rtgfiles extension before 1.5.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the Documents download rtgfiles extension before 1.5.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-1075
SQL injection vulnerability in the Documents download rtgfiles extension before 1.5.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2012-1076
Cross-site scripting XSS vulnerability in the Documents download rtgfiles extension before 1.5.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-1075
The CVE-2012-1075 entry concerns the TYPO3 extension rtg_files (Documents download). The vulnerability is an SQL injection in the rtg_files extension prior to version 1.5.2, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected software is TYPO3 with the rt...