VYPR
← TYPO3

Vendor CVEs

TYPO3

All CVEs

572 total · sorted by risk
  • CVE-2009-4164Dec 2, 2009
    Simple Glossar
    Simple Glossar
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the simple Glossar (simple_glossar) extension 1.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2009-4163Dec 2, 2009
    Tw Productfinder
    Tw Productfinder
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the TW Productfinder (tw_productfinder) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-4162Dec 2, 2009
    TYPO3
    DB Integration (wfqbe)
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the DB Integration (wfqbe) extension 1.3.1 and earlier for TYPO3 allows local users to execute arbitrary commands via unspecified vectors.

  • CVE-2009-4161Dec 2, 2009
    TYPO3
    AN Search it!
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the [AN] Search it! (an_searchit) extension 2.4.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2009-4158Dec 2, 2009
    TYPO3
    Calendar Base
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Calendar Base (cal) extension before 1.2.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-3636Nov 2, 2009
    TYPO3
    Typo3
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

  • CVE-2009-3635Nov 2, 2009
    TYPO3
    Typo3
    risk 0.00cvss —epss 0.02

    The Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to gain access by using only the password's md5 hash as a credential.

  • CVE-2009-3634Nov 2, 2009
    TYPO3
    Typo3
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the Frontend Login Box (aka felogin) subcomponent in TYPO3 4.2.0 through 4.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

  • CVE-2009-3633Nov 2, 2009
    TYPO3
    Typo3
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the t3lib_div::quoteJSvalue API function in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to…

  • CVE-2009-3632Nov 2, 2009
    TYPO3
    Typo3
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in the traditional frontend editing feature in the Frontend Editing subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to execute arbitrary SQL commands via…

  • CVE-2009-3631Nov 2, 2009
    TYPO3
    Typo3
    risk 0.00cvss —epss 0.03

    The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2, when the DAM extension or ftp upload is enabled, allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filename.

  • CVE-2009-3630Nov 2, 2009
    TYPO3
    Typo3
    risk 0.00cvss —epss 0.02

    The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to place arbitrary web sites in TYPO3 backend framesets via crafted parameters, related to a "frame hijacking" issue.

  • CVE-2009-3629Nov 2, 2009
    TYPO3
    Typo3
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in the Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2009-3628Nov 2, 2009
    TYPO3
    Typo3
    risk 0.00cvss —epss 0.01

    The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to determine an encryption key via crafted input to a tt_content form element.

  • CVE-2009-3820Oct 28, 2009
    TYPO3
    Flagbit Filebase (fb_filebase)
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Flagbit Filebase (fb_filebase) extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-3819Oct 28, 2009
    TYPO3
    Random Images (maag_randomimage)
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Random Images (maag_randomimage) extension 1.6.4 and earlier for TYPO3 allows remote attackers to execute arbitrary shell commands via unspecified vectors.

  • CVE-2009-2106Jun 17, 2009
    TYPO3
    civserv
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Virtual Civil Services (civserv) extension 4.3.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-2105Jun 17, 2009
    TYPO3
    t3references
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the References database (t3references) extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-2104Jun 17, 2009
    TYPO3
    ve_guestbook
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Modern Guestbook / Commenting System (ve_guestbook) extension 2.7.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2009-2103Jun 17, 2009
    TYPO3
    Frontend MP3 Player
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Frontend MP3 Player (fe_mp3player) 0.2.3 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-6699Apr 10, 2009
    TYPO3
    Typo3
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Resource Library (tjs_reslib) 0.1.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

  • CVE-2008-6698Apr 10, 2009
    TYPO3
    TARGET-E WorldCup Bets
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in TARGET-E WorldCup Bets (worldcup) 2.0.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

  • CVE-2008-6697Apr 10, 2009
    TYPO3
    worldcup
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in TARGET-E WorldCup Bets (worldcup) 2.0.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

  • CVE-2008-6696Apr 10, 2009
    TYPO3
    Fussballtippspiel
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in Fussballtippspiel (toto) 0.1.1 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

  • CVE-2008-6695Apr 10, 2009
    TYPO3
    timtab_sociable
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in TIMTAB social bookmark icons (timtab_sociable) 2.0.4 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

  • CVE-2008-6694Apr 10, 2009
    TYPO3
    Random Prayer 2
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in Random Prayer (ste_prayer) 0.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

  • CVE-2008-6693Apr 10, 2009
    TYPO3
    sb_downloader
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in Download system (sb_downloader) extension 0.1.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

  • CVE-2008-6692Apr 10, 2009
    TYPO3
    pd_trainingcourses
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in Diocese of Portsmouth Training Courses (pd_trainingcourses) extension 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

  • CVE-2008-6691Apr 10, 2009
    TYPO3
    pd_calendar_today
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in Diocese of Portsmouth Calendar Today (pd_calendar_today) extension 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

  • CVE-2008-6690Apr 10, 2009
    Nepa Design.de
    nd_antispam
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in nepa-design.de Spam Protection (nd_antispam) extension 1.0.3 for TYPO3 allows remote attackers to modify configuration via unknown vectors.

  • CVE-2008-6689Apr 10, 2009
    TYPO3
    Jobcontrol
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in JobControl (dmmjobcontrol) 1.15.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

  • CVE-2008-6688Apr 10, 2009
    TYPO3
    Jobcontrol
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in JobControl (dmmjobcontrol) 1.15.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

  • CVE-2008-6687Apr 10, 2009
    TYPO3
    dcdgooglemap
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in DCD GoogleMap (dcdgooglemap) 1.1.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

  • CVE-2008-6686Apr 10, 2009
    TYPO3
    CoolURI
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in CoolURI (cooluri) 1.0.11 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

  • CVE-2008-6685Apr 10, 2009
    TYPO3
    Frontend Filemanager
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Frontend Filemanager (air_filemanager) 0.6.1 and earlier extension for TYPO3 allows remote attackers to execute arbitrary commands via unknown vectors.

  • CVE-2008-6630Apr 7, 2009
    TYPO3
    Wt Gallery
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in the wt_gallery extension 2.5.0 and earlier for TYPO3 allows remote attackers to read arbitrary image files and determine directory structure via unspecified vectors.

  • CVE-2008-6595Apr 3, 2009
    TYPO3
    pmk_rssnewsexport
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the pmk_rssnewsexport extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-6594Apr 3, 2009
    TYPO3
    cm_rdfexport
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in the cm_rdfexport extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-6463Mar 13, 2009
    TYPO3
    pd_churchsearch
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Diocese of Portsmouth Church Search (pd_churchsearch) extension before 0.1.1, and 0.2.10 and earlier 0.2.x versions, an extension for TYPO3, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-6462Mar 13, 2009
    TYPO3
    myquizpoll
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the My quiz and poll (myquizpoll) extension before 0.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-6461Mar 13, 2009
    TYPO3
    ste_prayer2
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Random Prayer 2 (ste_prayer2) extension before 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-6460Mar 13, 2009
    TYPO3
    mw_random_objects
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Simple Random Objects (mw_random_objects) extension 1.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-6459Mar 13, 2009
    TYPO3
    Autobeuser
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the auto BE User Registration (autobeuser) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-6458Mar 13, 2009
    TYPO3
    tt_address & direct mail (dmaddredit) extension
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the FE address edit for tt_address & direct mail (dmaddredit) extension 0.4.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-6457Mar 13, 2009
    TYPO3
    Swigmore institute (cgswigmore) extension
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Swigmore institute (cgswigmore) extension before 0.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-6456Mar 13, 2009
    TYPO3
    HBook
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the HBook (h_book) extension 2.3.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-0816Mar 5, 2009
    TYPO3
    Typo3
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in the backend user interface in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 allow remote attackers to inject arbitrary web script or HTML via unspecified fields.

  • CVE-2008-6346Feb 27, 2009
    TYPO3
    DR Wiki
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the DR Wiki (dr_wiki) extension 1.7.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2008-6344Feb 27, 2009
    TYPO3
    tuc_staff
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the TU-Clausthal Staff (tuc_staff) 0.3.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2008-6343Feb 27, 2009
    TYPO3
    tuc_odin
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the TU-Clausthal ODIN (tuc_odin) extension 0.0.1, 0.1.0, 0.1.1, and 0.2.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Page 10 of 12