Show filters
7 Total Results
Displaying 1-7 of 7
Sort by:
Attacker Value
Unknown

CVE-2016-4056

Disclosure Date: January 23, 2017 (last updated November 25, 2024)
Cross-site scripting (XSS) vulnerability in the Backend component in TYPO3 6.2.x before 6.2.19 allows remote attackers to inject arbitrary web script or HTML via the module parameter when creating a bookmark.
0
0
Attacker Value
Unknown

CVE-2015-8755

Disclosure Date: January 08, 2016 (last updated November 25, 2024)
Multiple cross-site scripting (XSS) vulnerabilities in unspecified backend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allow remote authenticated editors to inject arbitrary web script or HTML via unknown vectors.
0
0
Attacker Value
Unknown

CVE-2015-8760

Disclosure Date: January 08, 2016 (last updated November 25, 2024)
The Flvplayer component in TYPO3 6.2.x before 6.2.16 allows remote attackers to embed Flash videos from external domains via unspecified vectors, aka "Cross-Site Flashing."
0
0
Attacker Value
Unknown

CVE-2015-8757

Disclosure Date: January 08, 2016 (last updated November 25, 2024)
Cross-site scripting (XSS) vulnerability in the Extension Manager in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to extension data during an extension installation.
0
0
Attacker Value
Unknown

CVE-2015-8756

Disclosure Date: January 08, 2016 (last updated November 25, 2024)
Cross-site scripting (XSS) vulnerability in the search result view in the Indexed Search (indexed_search) component in TYPO3 6.2.x before 6.2.16 allows remote authenticated editors to inject arbitrary web script or HTML via unspecified vectors.
0
0
Attacker Value
Unknown

CVE-2015-8758

Disclosure Date: January 08, 2016 (last updated November 25, 2024)
Multiple cross-site scripting (XSS) vulnerabilities in unspecified frontend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allow remote authenticated editors to inject arbitrary web script or HTML via unknown vectors.
0
0
Attacker Value
Unknown

CVE-2015-8759

Disclosure Date: January 08, 2016 (last updated November 25, 2024)
Cross-site scripting (XSS) vulnerability in the typoLink function in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote authenticated editors to inject arbitrary web script or HTML via a link field.
0
0