9 matches found
CVE-2012-1076
Cross-site scripting XSS vulnerability in the Documents download rtgfiles extension before 1.5.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the Documents download rtgfiles extension before 1.5.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Sql injection
SQL injection vulnerability in the Documents download rtgfiles extension before 1.5.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2012-1075
SQL injection vulnerability in the Documents download rtgfiles extension before 1.5.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2012-1076
Cross-site scripting XSS vulnerability in the Documents download rtgfiles extension before 1.5.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-1075
The CVE-2012-1075 entry concerns the TYPO3 extension rtg_files (Documents download). The vulnerability is an SQL injection in the rtg_files extension prior to version 1.5.2, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected software is TYPO3 with the rt...
CVE-2012-1076: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Documents download rtgfiles extension before 1.5.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2012-3064
Name of the Vulnerable Software and Affected Versions TYPO3 extension 'Documents download rtg files' versions prior to 1.5.2 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 1.5.2, update to version...
PT-2012-3063
Name of the Vulnerable Software and Affected Versions TYPO3 extension 'Documents download rtg files' versions prior to 1.5.2 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 1.5.2, update to version 1.5.2 or later t...