digitalfit-vhs-rlp.de Cross Site Scripting vulnerability OBB-3199835

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

vhs-hamburg.de Cross Site Scripting vulnerability OBB-2982174

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

vhs-hamburg.de Cross Site Scripting vulnerability OBB-2947653

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

vhs-oberaargau.ch Cross Site Scripting vulnerability OBB-2482734

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

vhs-ideen.de Improper Access Control vulnerability OBB-2408756

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

vhs-management.de Improper Access Control vulnerability OBB-2408758

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

vhs-bonn.de Cross Site Scripting vulnerability OBB-2280700

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

vhs-bayern.de Cross Site Scripting vulnerability OBB-2221227

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SQL Injection

fluidtypo3/vhs is vulnerable to SQL injection. An attacker is able to inject and execute arbitrary SQL statements via isLanguageViewHelper in the vhs extension...

GHSA-WQ4R-8342-JMC9 SQL injection in vhs (aka VHS: Fluid ViewHelpers)

The vhs aka VHS: Fluid ViewHelpers extension before 5.1.1 for TYPO3 allows SQL injection via isLanguageViewHelper...

SQL injection in vhs (aka VHS: Fluid ViewHelpers)

The vhs aka VHS: Fluid ViewHelpers extension before 5.1.1 for TYPO3 allows SQL injection via isLanguageViewHelper...

CVE-2021-28381

The vhs aka VHS: Fluid ViewHelpers extension before 5.1.1 for TYPO3 allows SQL injection via isLanguageViewHelper...

CVE-2021-28381

The vhs aka VHS: Fluid ViewHelpers extension before 5.1.1 for TYPO3 allows SQL injection via isLanguageViewHelper...

CVE-2021-28381

The vhs aka VHS: Fluid ViewHelpers extension before 5.1.1 for TYPO3 allows SQL injection via isLanguageViewHelper...

Sql injection

The vhs aka VHS: Fluid ViewHelpers extension before 5.1.1 for TYPO3 allows SQL injection via isLanguageViewHelper...

CVE-2021-28381

The vhs aka VHS: Fluid ViewHelpers extension before 5.1.1 for TYPO3 allows SQL injection via isLanguageViewHelper...

CVE-2021-28381

CVE-2021-28381 : The vhs (VHS: Fluid ViewHelpers) extension for TYPO3 is vulnerable to SQL injection via isLanguageViewHelper in versions before 5.1.1. The issue stems from improper validation of input in the isLanguageViewHelper, enabling attackers to potentially access database information. The...

CVE-2021-28381

The vhs aka VHS: Fluid ViewHelpers extension before 5.1.1 for TYPO3 allows SQL injection via isLanguageViewHelper...

SQL Injection in extension "VHS: Fluid ViewHelpers" (vhs)

It has been discovered that the extension is susceptible to blind SQL Injection when user input is passed to the isLanguageViewHelper...

vhs-perchtoldsdorf.at Cross Site Scripting vulnerability OBB-1391037

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...