Vulnerabilities

TI-2015-01279 CVE-2015-1403 · GHSA-m4v4-gxg5-x8hj

SQL injection vulnerability in the Content Rating extension 1.0.3 and earlier for TYPO3…

LOW 35

SQL injection vulnerability in the Content Rating extension 1.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01288 Published 2015-02-03 No fix listed CWE-89

TI-2015-01278 CVE-2015-1402 · GHSA-365w-7g5c-m7q2

Cross-site scripting (XSS) vulnerability in the Content Rating extension 1.0.3 and…

LOW 22

Cross-site scripting (XSS) vulnerability in the Content Rating extension 1.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01162 Published 2015-02-03 No fix listed CWE-79

Vulnerabilities

Filters

SQL injection vulnerability in the Content Rating extension 1.0.3 and earlier for TYPO3…

Cross-site scripting (XSS) vulnerability in the Content Rating extension 1.0.3 and…