In2code Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/in2code/ Sun, 26 Feb 2023 09:09:23 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png In2code Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/in2code/ 32 32 CVE-2008-2182 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-2182/ Sun, 26 Feb 2023 09:09:23 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-2182/ Cross-site scripting (XSS) vulnerability in the powermail extension before 1.1.10 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

The post CVE-2008-2182 appeared first on CVE Vulnerability.

]]> Cross-site scripting (XSS) vulnerability in the powermail extension before 1.1.10 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

The post CVE-2008-2182 appeared first on CVE Vulnerability.

]]> CVE-2021-36787 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-36787/ Thu, 23 Feb 2023 14:10:45 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-36787/ The femanager extension before 5.5.1 and 6.x before 6.3.1 for TYPO3 allows XSS via a crafted SVG document.

The post CVE-2021-36787 appeared first on CVE Vulnerability.

]]> The femanager extension before 5.5.1 and 6.x before 6.3.1 for TYPO3 allows XSS via a crafted SVG document.

The post CVE-2021-36787 appeared first on CVE Vulnerability.

]]> CVE-2022-35628 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-35628/ Thu, 23 Feb 2023 05:19:41 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-35628/ A SQL injection issue was discovered in the lux extension before 17.6.1, and 18.x through 24.x before 24.0.2, for TYPO3.

The post CVE-2022-35628 appeared first on CVE Vulnerability.

]]> A SQL injection issue was discovered in the lux extension before 17.6.1, and 18.x through 24.x before 24.0.2, for TYPO3.

The post CVE-2022-35628 appeared first on CVE Vulnerability.

]]> CVE-2023-25013 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-25013/ Wed, 22 Feb 2023 14:02:30 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-25013 An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the InvitationController allow an unauthenticated user to set the password of all frontend users.

The post CVE-2023-25013 appeared first on CVE Vulnerability.

]]> An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the InvitationController allow an unauthenticated user to set the password of all frontend users.

The post CVE-2023-25013 appeared first on CVE Vulnerability.

]]> CVE-2023-25014 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-25014/ Wed, 22 Feb 2023 14:02:30 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-25014 An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the InvitationController allow an unauthenticated user to delete all frontend users.

The post CVE-2023-25014 appeared first on CVE Vulnerability.

]]> An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the InvitationController allow an unauthenticated user to delete all frontend users.

The post CVE-2023-25014 appeared first on CVE Vulnerability.

]]>