Lucene search
+L

11 matches found

Veracode
Veracode
•added 2021/03/30 7:17 a.m.•28 views

SQL Injection

fluidtypo3/vhs is vulnerable to SQL injection. An attacker is able to inject and execute arbitrary SQL statements via isLanguageViewHelper in the vhs extension...

9.8CVSS5.2AI score0.01076EPSS
SaveExploits0References2Affected Software1
osv_ghsa
osv_ghsa
•added 2021/03/29 8:24 p.m.•50 views

GHSA-WQ4R-8342-JMC9 SQL injection in vhs (aka VHS: Fluid ViewHelpers)

The vhs aka VHS: Fluid ViewHelpers extension before 5.1.1 for TYPO3 allows SQL injection via isLanguageViewHelper...

5.4CVSS9.9AI score0.01076EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2021/03/29 8:24 p.m.•53 views

SQL injection in vhs (aka VHS: Fluid ViewHelpers)

The vhs aka VHS: Fluid ViewHelpers extension before 5.1.1 for TYPO3 allows SQL injection via isLanguageViewHelper...

9.8CVSS5.5AI score0.01076EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
•added 2021/03/17 12:00 a.m.•39 views

TYPO3 SQL Injection Vulnerability (CNVD-2021-22161)

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. TYPO3 suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in isLanguageViewHelper. An attacker can exploit this vulnerabilit...

9.8CVSS6.9AI score0.01076EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/03/16 8:15 p.m.•20 views

CVE-2021-28381

The vhs aka VHS: Fluid ViewHelpers extension before 5.1.1 for TYPO3 allows SQL injection via isLanguageViewHelper...

9.8CVSS7.4AI score0.01076EPSS
SaveExploits0References1
Prion
Prion
•added 2021/03/16 8:15 p.m.•28 views

Sql injection

The vhs aka VHS: Fluid ViewHelpers extension before 5.1.1 for TYPO3 allows SQL injection via isLanguageViewHelper...

7.5CVSS9.9AI score0.01076EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2021/03/16 7:48 p.m.•9 views

CVE-2021-28381

The vhs aka VHS: Fluid ViewHelpers extension before 5.1.1 for TYPO3 allows SQL injection via isLanguageViewHelper...

9.8CVSS0.01076EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2021/03/16 7:48 p.m.•53 views

CVE-2021-28381

The vhs aka VHS: Fluid ViewHelpers extension before 5.1.1 for TYPO3 allows SQL injection via isLanguageViewHelper...

9.8CVSS8.4AI score0.01076EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/03/16 12:00 a.m.•25 views

TYPO3 SQL injection vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. TYPO3 suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in isLanguageViewHelper. An attacker can exploit this vulnerabilit...

9.8CVSS6AI score0.01076EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/16 12:00 a.m.•8 views

CVE-2021-28381: Improper Neutralization of Special Elements used in an SQL Command

The vhs aka VHS: Fluid ViewHelpers extension before 5.1.1 for TYPO3 allows SQL injection via isLanguageViewHelper...

9.8CVSS5.8AI score0.01076EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/03/16 12:00 a.m.•3 views

PT-2021-17856

Name of the Vulnerable Software and Affected Versions: vhs extension versions prior to 5.1.1 for TYPO3 Description: The issue allows SQL injection via the isLanguageViewHelper. There is no information provided about the estimated number of potentially affected devices worldwide or real-world...

9.8CVSS0.01076EPSS
SaveExploits0References5
Rows per page
Query Builder