Vulnerabilities

TI-2010-00964 CVE-2010-1005 · GHSA-qxjp-c2rj-4qg3

Cross-site scripting (XSS) vulnerability in the Yet another TYPO3 search engine (YATSE)…

LOW 22

Cross-site scripting (XSS) vulnerability in the Yet another TYPO3 search engine (YATSE) extension before 0.3.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01022 Published 2010-03-19 No fix listed CWE-79

TI-2010-00963 CVE-2010-1004 · GHSA-xm4f-rxgw-f3v7

SQL injection vulnerability in the Yet another TYPO3 search engine (YATSE) extension…

LOW 35

SQL injection vulnerability in the Yet another TYPO3 search engine (YATSE) extension before 0.3.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01051 Published 2010-03-19 No fix listed CWE-89

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in the Yet another TYPO3 search engine (YATSE)…

SQL injection vulnerability in the Yet another TYPO3 search engine (YATSE) extension…