sr_freecap for Typo3 RCE Vulnerability

The srfreecap aka freeCap CAPTCHA extension 2.4.5 and below and 2.5.2 and below for TYPO3 fails to sanitize user input, which allows execution of arbitrary Extbase actions, resulting in Remote Code Execution...

GHSA-598P-RV6P-G7QC sr_freecap for Typo3 RCE Vulnerability

The srfreecap aka freeCap CAPTCHA extension 2.4.5 and below and 2.5.2 and below for TYPO3 fails to sanitize user input, which allows execution of arbitrary Extbase actions, resulting in Remote Code Execution...

CVE-2019-16699

The srfreecap aka freeCap CAPTCHA extension 2.4.5 and below and 2.5.2 and below for TYPO3 fails to sanitize user input, which allows execution of arbitrary Extbase actions, resulting in Remote Code Execution...

Remote code execution

The srfreecap aka freeCap CAPTCHA extension 2.4.5 and below and 2.5.2 and below for TYPO3 fails to sanitize user input, which allows execution of arbitrary Extbase actions, resulting in Remote Code Execution...

CVE-2019-16699

The CVE-2019-16699 issue affects the TYPO3 sr_freecap (freeCap CAPTCHA) extension, versions 2.4.5 and earlier and 2.5.2 and earlier. The root cause is improper sanitization of user input, which allows an attacker to trigger arbitrary Extbase actions and achieve Remote Code Execution (RCE). Public...

CVE-2019-16699

The srfreecap aka freeCap CAPTCHA extension 2.4.5 and below and 2.5.2 and below for TYPO3 fails to sanitize user input, which allows execution of arbitrary Extbase actions, resulting in Remote Code Execution...

CVE-2019-16699: Improper Input Validation

The srfreecap aka freeCap CAPTCHA extension 2.4.5 and below and 2.5.2 and below for TYPO3 fails to sanitize user input, which allows execution of arbitrary Extbase actions, resulting in Remote Code Execution...

CVE-2009-3818: Undefined Security Weakness

Unspecified vulnerability in the session handling feature in freeCap CAPTCHA srfreecap extension 1.2.0 and earlier for TYPO3 has unknown impact and attack vectors...

CVE-2008-5995: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the freeCap CAPTCHA srfreecap extension before 1.0.4 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...