Content Rating Extbase

CVEs (4)

CVE	Vendor / Product	CVSS	EPSS	Published	Description
CVE-2015-1405	TYPO3 Content Rating Extbase	—	0.01	Feb 3, 2015	SQL injection vulnerability in the Content Rating Extbase extension 2.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2015-1404	TYPO3 Content Rating Extbase	—	0.01	Feb 3, 2015	Cross-site scripting (XSS) vulnerability in the Content Rating Extbase extension 2.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2015-1403	Content Rating Project Content Rating	—	0.01	Feb 3, 2015	SQL injection vulnerability in the Content Rating extension 1.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2015-1402	Content Rating Project Content Rating	—	0.01	Feb 3, 2015	Cross-site scripting (XSS) vulnerability in the Content Rating extension 1.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVE-2015-1405Feb 3, 2015
TYPO3
Content Rating Extbase
risk 0.00cvss —epss 0.01
SQL injection vulnerability in the Content Rating Extbase extension 2.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2015-1404Feb 3, 2015
TYPO3
Content Rating Extbase
risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in the Content Rating Extbase extension 2.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2015-1403Feb 3, 2015
Content Rating Project
Content Rating
risk 0.00cvss —epss 0.01
SQL injection vulnerability in the Content Rating extension 1.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2015-1402Feb 3, 2015
Content Rating Project
Content Rating
risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in the Content Rating extension 1.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.