Vulnerabilities > Kennziffer > KE Search > 0.2.0
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2013-08-16 | CVE-2013-5307 | Cross-Site Scripting vulnerability in Kennziffer KE Search Cross-site scripting (XSS) vulnerability in the Faceted Search (ke_search) extension before 1.4.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 4.3 |
2013-08-16 | CVE-2013-5302 | SQL Injection vulnerability in Kennziffer KE Search SQL injection vulnerability in the Faceted Search (ke_search) extension before 1.4.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. | 7.5 |