typo3 freecap captcha extension vulnerabilities and exploits

(subscribe to this query)

9.8

CVSSv3

The sr_freecap (aka freeCap CAPTCHA) extension 2.4.5 and below and 2.5.2 and below for TYPO3 fails to sanitize user input, which allows execution of arbitrary Extbase actions, resulting in Remote Code Execution.

Sr Freecap Project Sr Freecap

NA

Cross-site scripting (XSS) vulnerability in the freeCap CAPTCHA (sr_freecap) extension prior to 1.0.4 for TYPO3 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.

Typo3 Freecap Captcha Extension 1.0.0 Typo3 Freecap Captcha Extension Typo3 Freecap Captcha Extension 1.0.2 Typo3 Freecap Captcha Extension 1.0.1

NA

Unspecified vulnerability in the session handling feature in freeCap CAPTCHA (sr_freecap) extension 1.2.0 and previous versions for TYPO3 has unknown impact and attack vectors.

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook