CVE-2022-23038

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

NiuShop_b2c frontend Components.php has file upload vulnerability

NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a set of PHP open source e-commerce system . NiuShopb2c front Components.php file upload vulnerability exists. The vulnerability stems from the system'...

CVE-2015-8758

Multiple cross-site scripting XSS vulnerabilities in unspecified frontend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allow remote authenticated editors to inject arbitrary web script or HTML via unknown vectors...

PT-2016-4003

Name of the Vulnerable Software and Affected Versions TYPO3 versions 6.2.x through 6.2.15 TYPO3 versions 7.x through 7.5 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in unspecified frontend components. These vulnerabilities allow remote authenticated editors to...

CVE-2015-8758: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in unspecified frontend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allow remote authenticated editors to inject arbitrary web script or HTML via unknown vectors...