Логотип exploitDog
bind:CVE-2015-5956
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2015-5956

Количество 4

Количество 4

ubuntu логотип

CVE-2015-5956

больше 10 лет назад

The sanitizeLocalUrl function in TYPO3 6.x before 6.2.15, 7.x before 7.4.0, 4.5.40, and earlier allows remote authenticated users to bypass the XSS filter and conduct cross-site scripting (XSS) attacks via a base64 encoded data URI, as demonstrated by the (1) returnUrl parameter to show_rechis.php and the (2) redirect_url parameter to index.php.

CVSS2: 3.5
EPSS: Низкий
nvd логотип

CVE-2015-5956

больше 10 лет назад

The sanitizeLocalUrl function in TYPO3 6.x before 6.2.15, 7.x before 7.4.0, 4.5.40, and earlier allows remote authenticated users to bypass the XSS filter and conduct cross-site scripting (XSS) attacks via a base64 encoded data URI, as demonstrated by the (1) returnUrl parameter to show_rechis.php and the (2) redirect_url parameter to index.php.

CVSS2: 3.5
EPSS: Низкий
debian логотип

CVE-2015-5956

больше 10 лет назад

The sanitizeLocalUrl function in TYPO3 6.x before 6.2.15, 7.x before 7 ...

CVSS2: 3.5
EPSS: Низкий
github логотип

GHSA-989h-wv8x-933p

больше 3 лет назад

TYPO3 cross-site scripting (XSS)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2015-5956

The sanitizeLocalUrl function in TYPO3 6.x before 6.2.15, 7.x before 7.4.0, 4.5.40, and earlier allows remote authenticated users to bypass the XSS filter and conduct cross-site scripting (XSS) attacks via a base64 encoded data URI, as demonstrated by the (1) returnUrl parameter to show_rechis.php and the (2) redirect_url parameter to index.php.

CVSS2: 3.5
0%
Низкий
больше 10 лет назад
nvd логотип
CVE-2015-5956

The sanitizeLocalUrl function in TYPO3 6.x before 6.2.15, 7.x before 7.4.0, 4.5.40, and earlier allows remote authenticated users to bypass the XSS filter and conduct cross-site scripting (XSS) attacks via a base64 encoded data URI, as demonstrated by the (1) returnUrl parameter to show_rechis.php and the (2) redirect_url parameter to index.php.

CVSS2: 3.5
0%
Низкий
больше 10 лет назад
debian логотип
CVE-2015-5956

The sanitizeLocalUrl function in TYPO3 6.x before 6.2.15, 7.x before 7 ...

CVSS2: 3.5
0%
Низкий
больше 10 лет назад
github логотип
GHSA-989h-wv8x-933p

TYPO3 cross-site scripting (XSS)

0%
Низкий
больше 3 лет назад

Уязвимостей на страницу