← back
CVE-2014-7200

CVE-2014-7200

EPSS 3.2%
Cross-site scripting (XSS) vulnerability in pi1/class.tx_dmmjobcontrol_pi1.php in the JobControl (dmmjobcontrol) extension 2.14.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via the tx_dmmjobcontrol_pi1[search][keyword] parameter to jobs/.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencepacketstormsecurity.com/files/128446/Typo3-JobControl-2.14.0-Cross-Site-Scripting-SQL-Injection.htmlunverifiedexploitdbwww.exploit-db.com/exploits/34800unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/128446/Typo3-JobControl-2.14.0-Cross-Site-Scripting-SQL-Injection.htmlhttp://seclists.org/fulldisclosure/2014/Sep/89https://www.mogwaisecurity.de/advisories/MSA-2014-02.txthttp://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-012http://www.securityfocus.com/bid/70155