Vulnerabilities > Kennziffer > KE Search > 1.1.0

DATE CVE VULNERABILITY TITLE RISK
2013-08-16 CVE-2013-5307 Cross-Site Scripting vulnerability in Kennziffer KE Search
Cross-site scripting (XSS) vulnerability in the Faceted Search (ke_search) extension before 1.4.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
4.3
2013-08-16 CVE-2013-5302 SQL Injection vulnerability in Kennziffer KE Search
SQL injection vulnerability in the Faceted Search (ke_search) extension before 1.4.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
network
low complexity
kennziffer typo3 CWE-89
7.5