Lucene search
K

TYPO3 不完整黑名单跨站脚本漏洞(CVE-2012-3530)

🗓️ 09 Sep 2012 00:00:00Reported by RootType 
seebug
 seebug
🔗 www.seebug.org👁 35 Views

TYPO3 t3lib_div::quoteJSvalue API函数存在不完整黑名单漏洞,允许远程攻击者利用漏洞通过某些HTML5 JavaScript事件注入任意WEB脚本或者HTML,可获得敏感信息或劫持用户会话

Related
ReporterTitlePublishedViews
Family
CVE
CVE-2012-3530
5 Sep 201223:00
cve
Cvelist
CVE-2012-3530
5 Sep 201223:00
cvelist
Debian
[SECURITY] [DSA 2537-1] typo3-src security update
30 Aug 201219:58
debian
Tenable Nessus
Debian DSA-2537-1 : typo3-src - several vulnerabilities
31 Aug 201200:00
nessus
EUVD
EUVD-2022-3285
3 Oct 202520:07
euvd
Github Security Blog
Typo3 API XSS Vulnerability
17 May 202201:43
github
NVD
CVE-2012-3530
5 Sep 201223:55
nvd
OpenVAS
Debian: Security Advisory (DSA-2537-1)
7 Sep 201200:00
openvas
OpenVAS
TYPO3 Multiple Vulnerabilities (Aug 2012)
3 Jan 201400:00
openvas
OpenVAS
Debian Security Advisory DSA 2537-1 (typo3-src)
7 Sep 201200:00
openvas
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation