VYPR
← TYPO3

Vendor CVEs

TYPO3

All CVEs

539 total · sorted by risk
  • CVE-2008-6686Apr 10, 2009
    TYPO3
    CoolURI
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in CoolURI (cooluri) 1.0.11 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

  • CVE-2008-6685Apr 10, 2009
    TYPO3
    Frontend Filemanager
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Frontend Filemanager (air_filemanager) 0.6.1 and earlier extension for TYPO3 allows remote attackers to execute arbitrary commands via unknown vectors.

  • CVE-2008-6630Apr 7, 2009
    TYPO3
    Wt Gallery
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in the wt_gallery extension 2.5.0 and earlier for TYPO3 allows remote attackers to read arbitrary image files and determine directory structure via unspecified vectors.

  • CVE-2008-6595Apr 3, 2009
    TYPO3
    pmk_rssnewsexport
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the pmk_rssnewsexport extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-6594Apr 3, 2009
    TYPO3
    cm_rdfexport
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in the cm_rdfexport extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-6463Mar 13, 2009
    TYPO3
    pd_churchsearch
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Diocese of Portsmouth Church Search (pd_churchsearch) extension before 0.1.1, and 0.2.10 and earlier 0.2.x versions, an extension for TYPO3, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-6462Mar 13, 2009
    TYPO3
    myquizpoll
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the My quiz and poll (myquizpoll) extension before 0.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-6461Mar 13, 2009
    TYPO3
    ste_prayer2
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Random Prayer 2 (ste_prayer2) extension before 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-6460Mar 13, 2009
    TYPO3
    mw_random_objects
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Simple Random Objects (mw_random_objects) extension 1.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-6459Mar 13, 2009
    TYPO3
    Autobeuser
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the auto BE User Registration (autobeuser) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-6458Mar 13, 2009
    TYPO3
    tt_address & direct mail (dmaddredit) extension
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the FE address edit for tt_address & direct mail (dmaddredit) extension 0.4.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-6457Mar 13, 2009
    TYPO3
    Swigmore institute (cgswigmore) extension
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Swigmore institute (cgswigmore) extension before 0.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-6456Mar 13, 2009
    TYPO3
    HBook
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the HBook (h_book) extension 2.3.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-0816Mar 5, 2009
    TYPO3
    Typo3
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in the backend user interface in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 allow remote attackers to inject arbitrary web script or HTML via unspecified fields.

  • CVE-2008-6346Feb 27, 2009
    TYPO3
    DR Wiki
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the DR Wiki (dr_wiki) extension 1.7.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2008-6344Feb 27, 2009
    TYPO3
    tuc_staff
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the TU-Clausthal Staff (tuc_staff) 0.3.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-6343Feb 27, 2009
    TYPO3
    tuc_odin
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the TU-Clausthal ODIN (tuc_odin) extension 0.0.1, 0.1.0, 0.1.1, and 0.2.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2008-6342Feb 27, 2009
    TYPO3
    simplefilebrowser
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the TYPO3 Simple File Browser (simplefilebrowser) extension 1.0.2 and earlier allows remote attackers to obtain sensitive information via unknown attack vectors.

  • CVE-2008-6341Feb 27, 2009
    TYPO3
    Sb Universal Plugin
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the SB Universal Plugin (SBuniplug) extension 2.0.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2008-6340Feb 27, 2009
    TYPO3
    mv_vox_populi
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Vox populi (mv_vox_populi) extension 0.3.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2008-6338Feb 27, 2009
    TYPO3
    wes_facilities
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the WEBERkommunal Facilities (wes_facilities) extension 2.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-6145Feb 16, 2009
    TYPO3
    Wec Discussion Forum
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in the WEC Discussion Forum (wec_discussion) extension 1.7.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-6144Feb 16, 2009
    TYPO3
    Wec Discussion Forum
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in the WEC Discussion Forum (wec_discussion) extension 1.7.0 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-3029.

  • CVE-2008-5995Jan 28, 2009
    TYPO3
    sr_freecap
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the freeCap CAPTCHA (sr_freecap) extension before 1.0.4 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2009-0258Jan 22, 2009
    TYPO3
    Typo3
    risk 0.00cvss —epss 0.03

    The Indexed Search Engine (indexed_search) system extension in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to execute arbitrary commands via a crafted filename containing shell metacharacters, which is not properly handled by…

  • CVE-2009-0257Jan 22, 2009
    TYPO3
    Typo3
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) content of indexed files to the (a) Indexed Search Engine…

  • CVE-2009-0256Jan 22, 2009
    TYPO3
    Typo3
    risk 0.00cvss —epss 0.02

    Session fixation vulnerability in the authentication library in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to hijack web sessions via unspecified vectors related to (1) frontend and (2) backend authentication.

  • CVE-2008-5801Dec 31, 2008
    TYPO3
    Dictionary
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Dictionary (rtgdictionary) extension 0.1.9 and earlier for TYPO3 allows attackers to execute arbitrary code via unknown vectors.

  • CVE-2008-5800Dec 31, 2008
    TYPO3
    Wir Ber Uns Extension
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Wir ber uns [sic] (fsmi_people) extension 0.0.24 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-5799Dec 31, 2008
    TYPO3 Association
    fsmi_people
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Wir ber uns (fsmi_people) extension 0.0.24 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2008-5798Dec 31, 2008
    TYPO3
    cms_poll
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the CMS Poll system (cms_poll) extension before 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-5797Dec 31, 2008
    TYPO3
    Advcalendar Extension
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the advCalendar extension 0.3.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-5796Dec 31, 2008
    TYPO3
    eluna_pagecomments
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the eluna Page Comments (eluna_pagecomments) extension 1.1.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-5795Dec 31, 2008
    TYPO3
    eluna_pagecomments
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the eluna Page Comments (eluna_pagecomments) extension 1.1.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2008-5656Dec 17, 2008
    TYPO3
    Typo3
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the frontend plugin for the felogin system extension in TYPO3 4.2.0, 4.2.1 and 4.2.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

  • CVE-2008-5644Dec 17, 2008
    TYPO3
    Typo3
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the file backend module in TYPO3 4.2.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

  • CVE-2008-5609Dec 17, 2008
    TYPO3
    Commerce Extension
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Commerce extension 0.9.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-5096Nov 14, 2008
    TYPO3
    File List Extension
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the TYPO3 File List (file_list) extension 0.2.1 and earlier allows remote attackers to obtain sensitive information via unknown attack vectors.

  • CVE-2008-5087Nov 14, 2008
    TYPO3
    Another Backend Login
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in TYPO3 Another Backend Login (wrg_anotherbelogin) extension before 0.0.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-4661Oct 22, 2008
    TYPO3
    sm_pageimprovements
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Page Improvements (sm_pageimprovements) 1.1.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2008-4660Oct 22, 2008
    TYPO3
    M1 Intern
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the M1 Intern (m1_intern) 1.0.0 extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-4659Oct 22, 2008
    TYPO3
    Mannschaftsliste
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Mannschaftsliste (kiddog_playerlist) 1.0.3 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-4658Oct 22, 2008
    TYPO3
    Jobcontrol
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the JobControl (dmmjobcontrol) 1.15.4 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-4657Oct 22, 2008
    TYPO3
    Econda Plugin
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Econda Plugin (econda) 0.0.2 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-4656Oct 22, 2008
    TYPO3
    Frontend Users View
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Frontend Users View (feusersview) 0.1.6 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-4655Oct 22, 2008
    TYPO3
    Simplesurvey
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Simple survey (simplesurvey) 1.7.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-4188Sep 23, 2008
    TYPO3
    Secure Directory
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the TYPO3 Secure Directory (kw_secdir) extension before 1.0.2 allows remote attackers to execute arbitrary code via unknown vectors related to "injection of control characters."

  • CVE-2008-3038Jul 7, 2008
    TYPO3
    Address Directory
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Address Directory (sp_directory) extension 0.2.10 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-3049Jul 7, 2008
    TYPO3
    pdf_generator2
    risk 0.00cvss —epss 0.01

    The PDF Generator 2 (pdf_generator2) extension 0.5.0 and earlier for TYPO3 allows attackers to obtain sensitive information via unspecified vectors.

  • CVE-2008-3037Jul 7, 2008
    TYPO3
    Address Directory
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Address Directory (sp_directory) extension 0.2.10 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Page 10 of 11