content_rating_extbase_project - MidnightBSD Security Advisories

Advisories for content_rating_extbase_project

CVE-2015-1404 MEDIUM

Cross-site scripting (XSS) vulnerability in the Content Rating Extbase extension 2.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-79,

Products Affected

Vendor	Product	Version
content_rating_extbase_project	content_rating_extbase	*

CVE-2015-1405 HIGH

SQL injection vulnerability in the Content Rating Extbase extension 2.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0

Severity: HIGH

Problem Type: CWE-89,

Products Affected

Vendor	Product	Version
content_rating_extbase_project	content_rating_extbase	*