CVE-2015-1404

TYPO3 Content Rating Extbase extension (content_rating_extbase) vulnerable: versions 2.0.3 and older are affected. Root cause is improper escaping of user input in HTML and SQL contexts, enabling Cross-Site Scripting (XSS) and SQL Injection as described in TYPO3 security bulletin TYPO3-EXT-SA-201...

CVE-2015-1405

CVE-2015-1405 affects the TYPO3 Content Rating Extbase extension (component: content_rating_extbase) for TYPO3, specifically versions 2.0.3 and earlier. The weakness is an SQL injection vulnerability that allows a remote attacker to execute arbitrary SQL commands via unspecified vectors. The rela...