Show filters
8 Total Results
Displaying 1-8 of 8
Sort by:
Attacker Value
Unknown

CVE-2016-4056

Disclosure Date: January 23, 2017 (last updated November 25, 2024)
Cross-site scripting (XSS) vulnerability in the Backend component in TYPO3 6.2.x before 6.2.19 allows remote attackers to inject arbitrary web script or HTML via the module parameter when creating a bookmark.
0
0
Attacker Value
Unknown

CVE-2015-8755

Disclosure Date: January 08, 2016 (last updated November 25, 2024)
Multiple cross-site scripting (XSS) vulnerabilities in unspecified backend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allow remote authenticated editors to inject arbitrary web script or HTML via unknown vectors.
0
0
Attacker Value
Unknown

CVE-2015-8760

Disclosure Date: January 08, 2016 (last updated November 25, 2024)
The Flvplayer component in TYPO3 6.2.x before 6.2.16 allows remote attackers to embed Flash videos from external domains via unspecified vectors, aka "Cross-Site Flashing."
0
0
Attacker Value
Unknown

CVE-2015-8757

Disclosure Date: January 08, 2016 (last updated November 25, 2024)
Cross-site scripting (XSS) vulnerability in the Extension Manager in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to extension data during an extension installation.
0
0
Attacker Value
Unknown

CVE-2015-8756

Disclosure Date: January 08, 2016 (last updated November 25, 2024)
Cross-site scripting (XSS) vulnerability in the search result view in the Indexed Search (indexed_search) component in TYPO3 6.2.x before 6.2.16 allows remote authenticated editors to inject arbitrary web script or HTML via unspecified vectors.
0
0
Attacker Value
Unknown

CVE-2015-8758

Disclosure Date: January 08, 2016 (last updated November 25, 2024)
Multiple cross-site scripting (XSS) vulnerabilities in unspecified frontend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allow remote authenticated editors to inject arbitrary web script or HTML via unknown vectors.
0
0
Attacker Value
Unknown

CVE-2015-8759

Disclosure Date: January 08, 2016 (last updated November 25, 2024)
Cross-site scripting (XSS) vulnerability in the typoLink function in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote authenticated editors to inject arbitrary web script or HTML via a link field.
0
0
Attacker Value
Unknown

CVE-2015-5956

Disclosure Date: September 16, 2015 (last updated October 05, 2023)
The sanitizeLocalUrl function in TYPO3 6.x before 6.2.15, 7.x before 7.4.0, 4.5.40, and earlier allows remote authenticated users to bypass the XSS filter and conduct cross-site scripting (XSS) attacks via a base64 encoded data URI, as demonstrated by the (1) returnUrl parameter to show_rechis.php and the (2) redirect_url parameter to index.php.
0
0