CVE-2015-1403

CVE-2015-1403 affects TYPO3 Content Rating extension (content_rating) version 1.0.3 and earlier. Root cause is SQL injection due to improper input handling in the extension, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. Impact includes compromise of database...

CVE-2015-1402

CVE-2015-1402 affects the TYPO3 Content Rating extension (version 1.0.3 and earlier). The root cause is improper input handling, enabling cross-site scripting (XSS) via unspecified vectors and, per TYPO3 bulletins, potential SQL injection. Impact is listed as XSS with partial integrity exposure a...