VYPR
← TYPO3

Vendor CVEs

TYPO3

All CVEs

539 total · sorted by risk
  • CVE-2010-1005Mar 19, 2010
    TYPO3
    YATSE
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Yet another TYPO3 search engine (YATSE) extension before 0.3.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-1004Mar 19, 2010
    TYPO3
    Yet another TYPO3 search engine (YATSE)
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Yet another TYPO3 search engine (YATSE) extension before 0.3.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-4711Mar 15, 2010
    TYPO3
    CoolURI
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the CoolURI (cooluri) extension before 1.0.16 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2008-6686.

  • CVE-2009-4710Mar 15, 2010
    TYPO3
    cwt_resetbepassword
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Reset backend password (cwt_resetbepassword) extension 1.20 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-4709Mar 15, 2010
    TYPO3
    datamints Newsticker
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the datamints Newsticker (datamints_newsticker) extension before 0.7.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-4708Mar 15, 2010
    TYPO3
    Front End News Submitter
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the [Gobernalia] Front End News Submitter (gb_fenewssubmit) extension 0.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-4707Mar 15, 2010
    TYPO3
    Front End News Submitter
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the [Gobernalia] Front End News Submitter (gb_fenewssubmit) extension 0.1.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2009-4706Mar 15, 2010
    TYPO3
    Mailform
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Mailform (mailform) extension before 0.9.24 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2009-4705Mar 15, 2010
    TYPO3
    Twitter Search
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Twitter Search (twittersearch) extension before 0.1.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2009-4704Mar 15, 2010
    TYPO3
    Ws Ecard
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Webesse E-Card (ws_ecard) extension 1.0.2 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors.

  • CVE-2009-4703Mar 15, 2010
    TYPO3
    Webesse Image Gallery (ws_gallery)
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Webesse Image Gallery (ws_gallery) extension 1.0.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-4702Mar 15, 2010
    TYPO3
    pm_tour
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Tour Extension (pm_tour) extension before 0.0.13 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-4701Mar 15, 2010
    TYPO3
    myth_download
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Myth download (myth_download) extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2010-0798Mar 2, 2010
    TYPO3
    T3BLOG
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the T3BLOG extension 0.6.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2010-0797Mar 2, 2010
    TYPO3
    T3BLOG
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the T3BLOG extension 0.6.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-0286Feb 22, 2010
    TYPO3
    Typo3
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the OpenID Identity Authentication extension in TYPO3 4.3.0 allows remote attackers to bypass authentication and gain access to a backend user account via unknown attack vectors in which both the attacker and victim have an OpenID provider that…

  • CVE-2010-0350Jan 15, 2010
    TYPO3
    Photo Book (goof_fotoboek)
    risk 0.00cvss —epss 0.01

    Directory traversal vulnerability in the Photo Book (goof_fotoboek) extension 1.7.14 and earlier for TYPO3 has unknown impact and remote attack vectors.

  • CVE-2010-0347Jan 15, 2010
    TYPO3
    VD / Geomap (vd_geomap)
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the VD / Geomap (vd_geomap) extension 0.3.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-0346Jan 15, 2010
    TYPO3
    Mimi Tipfriends
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Tip many friends (mimi_tipfriends) extension 0.0.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-0345Jan 15, 2010
    TYPO3
    Majordomo
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Majordomo extension 1.1.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-0344Jan 15, 2010
    TYPO3
    Zak Store Management
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the zak_store_management extension 1.0.0 and earlier TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2010-0343Jan 15, 2010
    TYPO3
    Clan Users List
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Clan Users List (pb_clanlist) extension 0.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2010-0342Jan 15, 2010
    TYPO3
    Job Reports
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Reports for Job (job_reports) extension 0.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2010-0341Jan 15, 2010
    TYPO3
    Bb Simplejobs
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the BB Simple Jobs (bb_simplejobs) extension 0.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2010-0340Jan 15, 2010
    TYPO3
    Mjseventpro
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the MJS Event Pro (mjseventpro) extension 0.2.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2010-0339Jan 15, 2010
    TYPO3
    User Links
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the User Links (vm19_userlinks) extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2010-0338Jan 15, 2010
    TYPO3
    Ttpedit
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the TT_Products editor (ttpedit) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2010-0337Jan 15, 2010
    TYPO3
    tt_news Mail alert
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the tt_news Mail alert (dl3_tt_news_alerts) extension 0.2.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2010-0336Jan 15, 2010
    TYPO3
    Kiddog Mysqldumper
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the kiddog_mysqldumper (kiddog_mysqldumper) extension 0.0.3 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown attack vectors.

  • CVE-2010-0335Jan 15, 2010
    TYPO3
    vote_for_tt_news
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Vote rank for news (vote_for_tt_news) extension 1.0.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-0334Jan 15, 2010
    TYPO3
    vote_for_tt_news
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Vote rank for news (vote_for_tt_news) extension 1.0.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2010-0333Jan 15, 2010
    TYPO3
    Helpdesk (mg_help)
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Helpdesk (mg_help) extension 1.1.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2010-0332Jan 15, 2010
    TYPO3
    TV21 Talkshow
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the TV21 Talkshow (tv21_talkshow) extension 1.0.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2010-0331Jan 15, 2010
    TYPO3
    TV21 Talkshow
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the TV21 Talkshow (tv21_talkshow) extension 1.0.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-0327Jan 15, 2010
    TYPO3
    Kj Imagelightbox2
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the KJ: Imagelightbox (kj_imagelightbox2) extension 2.0.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2008-2490.

  • CVE-2010-0326Jan 15, 2010
    TYPO3
    devlog
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Developer log (devlog) extension 2.9.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-0325Jan 15, 2010
    TYPO3
    SB Folderdownload
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the SB Folderdownload (sb_folderdownload) extension 0.2.2 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown attack vectors.

  • CVE-2010-0323Jan 15, 2010
    TYPO3
    Photo Book
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Photo Book (goof_fotoboek) extension 1.7.14 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown attack vectors.

  • CVE-2010-0322Jan 15, 2010
    TYPO3
    MK-AnydropdownMenu
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the init function in MK-AnydropdownMenu (mk_anydropdownmenu) extension 0.3.28 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-4401Dec 22, 2009
    TYPO3
    ste_parish_admin
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Parish Administration Database (ste_parish_admin) extension 0.1.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-4400Dec 22, 2009
    TYPO3
    ste_parish_admin
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Parish Administration Database (ste_parish_admin) extension 0.1.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2009-4399Dec 22, 2009
    TYPO3
    hs_religiousartgallery
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Parish of the Holy Spirit Religious Art Gallery (hs_religiousartgallery) extension 0.1.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-4398Dec 22, 2009
    TYPO3
    hs_religiousartgallery
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Parish of the Holy Spirit Religious Art Gallery (hs_religiousartgallery) extension 0.1.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2009-4397Dec 22, 2009
    TYPO3
    pd_resources
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Diocese of Portsmouth Resources Database (pd_resources) extension 0.1.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2009-4396Dec 22, 2009
    TYPO3
    pd_resources
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Diocese of Portsmouth Resources Database (pd_resources) extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-4395Dec 22, 2009
    TYPO3
    ste_prayer2
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Random Prayer 2 (ste_prayer2) extension 0.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2009-4394Dec 22, 2009
    TYPO3
    Random Prayer 2
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in the Random Prayer 2 (ste_prayer2) extension 0.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-4393Dec 22, 2009
    TYPO3
    danp_documentdirs
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Document Directorys (danp_documentdirs) extension 1.10.7 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-4392Dec 22, 2009
    TYPO3
    XDS Staff List
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the XDS Staff List (xds_staff) extension 0.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-4391Dec 22, 2009
    TYPO3
    dr_blob
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the File list (dr_blob) extension 2.1.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Page 8 of 11