CVE-2017-5962

An issue was discovered in contextswurfl for TYPO3 before 0.4.2. The vulnerability exists due to insufficient filtration of user-supplied data in the "forceua" HTTP GET parameter passed to the "/contextswurfl/Library/wurfl-dbapi-1.4.4.0/checkwurfl.php" URL. An attacker could execute arbitrary HTM...

PT-2017-16790

Name of the Vulnerable Software and Affected Versions contexts wurfl for TYPO3 versions prior to 0.4.2 Description The issue is caused by insufficient filtration of user-supplied data in the force ua HTTP GET parameter passed to the "/contexts wurfl/Library/wurfl-dbapi-1.4.4.0/check wurfl.php" AP...