CVE-2018-6905: Improper Neutralization of Input During Web Page Generation

The page module in TYPO3 before 8.7.11, and 9.1.0, has XSS via $GLOBALS'TYPO3CONFVARS''SYS''sitename', as demonstrated by an admin entering a crafted site name during the installation process...

PT-2018-17813

Name of the Vulnerable Software and Affected Versions TYPO3 versions prior to 8.7.11 TYPO3 version 9.1.0 Description The issue concerns a problem where an admin can enter a crafted site name during the installation process, leading to XSS via $GLOBALS'TYPO3 CONF VARS''SYS''sitename'. This occurs ...

WordPress Truemag Theme - Cross Site Scripting

The vulnerability is located in the "s" value of the page module GET method request. Because of this vulnerability remote attackers are able to inject own malicious script codes to the client-side of the online service web-application to compromise user session information or data. Solution Updat...

CVE-2010-2030

CVE-2010-2030 describes a Cross-Site Scripting (XSS) flaw in Drupal’s External Link Page module for versions 5.x < 5.x-1.0 and 6.x

Sql injection

SQL injection vulnerability in the News Page module 5.x before 5.x-1.2 for Drupal allows remote authenticated users, with News Page nodes create and edit privileges, to execute arbitrary SQL commands via the Include Words aka keywords field...

CVE-2009-1505

CVE-2009-1505 affects the Drupal News Page module (5.x) prior to 5.x-1.2. The vulnerability is a SQL injection in the Include Words field that allows remote authenticated users (with News Page create/edit privileges) to execute arbitrary SQL commands. Underlying issue: input handling in the Keywo...

CVE-2009-1505

SQL injection vulnerability in the News Page module 5.x before 5.x-1.2 for Drupal allows remote authenticated users, with News Page nodes create and edit privileges, to execute arbitrary SQL commands via the Include Words aka keywords field...

SA-CONTRIB-2009-023 - News Page - SQL injection

The News Page module provides a node content type which displays feed items from an aggregator category, filtered by keywords entered into the 'Include Words' field of the node. Unfortunately the News Page module uses keywords directly in SQL queries without being sanitized, allowing SQL injectio...