CVE-2014-6299

The CVE-2014-6299 entry concerns the TYPO3 extension mm_forum. A CSRF vulnerability existed in mm_forum up to version 1.9.2 that allowed remote attackers to hijack user authentication for requests that create posts. The TYPO3 security bulletin (TYPO3-EXT-SA-2014-001) confirms this class of vulner...

CVE-2014-6298

CVE-2014-6298 refers to an unrestricted file upload vulnerability in the TYPO3 extension mm_forum (versions 1.9.2 and below). The issue enables remote code execution when an attacker uploads a file with an executable extension and accesses it via unspecified vectors, due to insufficient input/fil...

CVE-2020-15516

The CVE-2020-15516 issue affects the TYPO3 mm_forum extension up to version 1.9.5. The connected documents describe a cross-site scripting vulnerability that can be exploited via cross-site request forgery (CSRF) due to improper input encoding in HTML output and missing CSRF protection for the up...

CVE-2014-6297

The CVE-2014-6297 entry corresponds to a Cross‑site Scripting (XSS) vulnerability in the TYPO3 mm_forum extension prior to 1.9.3. The issue affects TYPO3 installations using mm_forum version ≤ 1.9.2 and is caused by insufficient input sanitization, allowing remote attackers to inject arbitrary we...