Skip to content
OpenAdvisories

Archive

2 December 2009

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Low —

    TYPO3 Direct Mail Extension Vulnerable to Cross-Site Scripting (XSS)

    Cross-site scripting (XSS) vulnerability in the newsletter configuration feature in the backend module in the Direct Mail (direct_mail) extension 2.6.4 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecif…