Mh Httpbl Extension
Approved changes feed: RSS · Atom
cpe:2.3:a:mback2k:mh_httpbl_extension:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Mback2K (67936d28-ce76-5add-a408-a2e3b161dfcc) |
|---|---|
| Product | Mh Httpbl Extension (cca435de-451d-570f-83bd-ee56b253416c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-15032 |
vulnerable | 2026-06-08 05:07:26.231335 |
mback2k mh_httpbl Extension class.tx_mhhttpbl.php stopOutput cross site scripting
LOW (3.5)
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic has been found in mback2k mh_httpbl Extension up to 1.1.7 on TYPO3. This affects the function stopOutput of the file class.tx_mhhttpbl.php. The manipulation of the argument $_SERVER['REMOTE_ADDR'] leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.1.8 is able to address this issue. The patch is named a754bf306a433a8c18b55e25595593e8f19b9463. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-230391. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2023-06-01T22:31:04.601Z
Updated: 2024-08-06T03:47:34.816Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-10106 |
vulnerable | 2026-06-08 05:06:24.688762 |
mback2k mh_httpbl Extension index.php moduleContent sql injection
MEDIUM (6.3)
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in mback2k mh_httpbl Extension up to 1.1.7 on TYPO3. This vulnerability affects the function moduleContent of the file mod1/index.php. The manipulation leads to sql injection. The attack can be initiated remotely. Upgrading to version 1.1.8 is able to address this issue. The patch is identified as 429f50f4e4795b20dae06735b41fb94f010722bf. It is recommended to upgrade the affected component. VDB-230086 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2023-05-28T12:31:04.340Z
Updated: 2024-08-06T08:58:26.414Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.