EUVD-2016-2098

Malware in sbrugna...

CVE-2016-15032

UNSUPPORTED WHEN ASSIGNED A vulnerability classified as problematic has been found in mback2k mhhttpbl Extension up to 1.1.7 on TYPO3. This affects the function stopOutput of the file class.txmhhttpbl.php. The manipulation of the argument $SERVER'REMOTEADDR' leads to cross site scripting. It is...

Cross site scripting

UNSUPPORTED WHEN ASSIGNED A vulnerability classified as problematic has been found in mback2k mhhttpbl Extension up to 1.1.7 on TYPO3. This affects the function stopOutput of the file class.txmhhttpbl.php. The manipulation of the argument $SERVER'REMOTEADDR' leads to cross site scripting. It is...

CVE-2016-15032

CVE-2016-15032 affects the TYPO3 extension mback2k mh_httpbl (versions ≤ 1.1.7). The vulnerability lies in the stopOutput function of class.tx_mhhttpbl.php, where manipulation of $_SERVER['REMOTE_ADDR'] enables cross-site scripting. It can be triggered remotely. The issue is addressed in version ...

CVE-2016-15032 mback2k mh_httpbl Extension class.tx_mhhttpbl.php stopOutput cross site scripting

UNSUPPORTED WHEN ASSIGNED A vulnerability classified as problematic has been found in mback2k mhhttpbl Extension up to 1.1.7 on TYPO3. This affects the function stopOutput of the file class.txmhhttpbl.php. The manipulation of the argument $SERVER'REMOTEADDR' leads to cross site scripting. It is...

CVE-2016-15032: Improper Neutralization of Input During Web Page Generation

UNSUPPORTED WHEN ASSIGNED A vulnerability classified as problematic has been found in mback2k mhhttpbl Extension up to 1.1.7 on TYPO3. This affects the function stopOutput of the file class.txmhhttpbl.php. The manipulation of the argument $SERVER'REMOTEADDR' leads to cross site scripting. It is...

CVE-2015-10106: Improper Neutralization of Special Elements used in an SQL Command

UNSUPPORTED WHEN ASSIGNED A vulnerability classified as critical was found in mback2k mhhttpbl Extension up to 1.1.7 on TYPO3. This vulnerability affects the function moduleContent of the file mod1/index.php. The manipulation leads to sql injection. The attack can be initiated remotely. Upgrading...