5 matches found
CVE-2012-1075
SQL injection vulnerability in the Documents download rtgfiles extension before 1.5.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2012-1076
The CVE-2012-1076 affects the TYPO3 extension rtg_files in the Documents download feature, vulnerable before version 1.5.2 . The issue is a Cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Impact details are limi...
CVE-2012-1075
The CVE-2012-1075 entry concerns the TYPO3 extension rtg_files (Documents download). The vulnerability is an SQL injection in the rtg_files extension prior to version 1.5.2, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected software is TYPO3 with the rt...
CVE-2012-1076: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Documents download rtgfiles extension before 1.5.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-1075: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Documents download rtgfiles extension before 1.5.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...