VYPR
← TYPO3

Vendor CVEs

TYPO3

All CVEs

572 total · sorted by risk
  • CVE-2009-4956Jul 22, 2010
    TYPO3
    ws_stats
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Visitor Tracking (ws_stats) extension before 0.1.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2009-4955Jul 22, 2010
    TYPO3
    th_ultracards
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the ultraCards (th_ultracards) extension before 0.5.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-4954Jul 22, 2010
    TYPO3
    Versatile Calendar Extension [VCE] (sk_calendar)
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Versatile Calendar Extension [VCE] (sk_calendar) extension before 0.3.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-4953Jul 22, 2010
    TYPO3
    sg_userdata
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Userdata Create/Edit (sg_userdata) extension before 0.91.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2009-4952Jul 22, 2010
    TYPO3
    Directory Listing
    risk 0.00cvss —epss 0.03

    Directory traversal vulnerability in the Directory Listing (dir_listing) extension 1.1.0 and earlier for TYPO3 allows remote attackers to have an unspecified impact via unknown vectors.

  • CVE-2009-4951Jul 22, 2010
    TYPO3
    ClickStream Analyzer [output]
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the ClickStream Analyzer [output] (alternet_csa_out) extension 0.3.0 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors.

  • CVE-2009-4950Jul 22, 2010
    TYPO3
    A21glossary Advanced Output
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the A21glossary Advanced Output (a21glossary_advanced_output) extension before 0.1.12 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-4804Apr 23, 2010
    TYPO3
    Calendar Base
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Calendar Base (cal) extension before 1.1.1 for TYPO3, when Internet Explorer 6 is used, allows remote attackers to inject arbitrary web script or HTML via "search parameters."

  • CVE-2009-4802Apr 23, 2010
    TYPO3
    flatmgr
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Flat Manager (flatmgr) extension before 1.9.16 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2010-1153Apr 20, 2010
    TYPO3
    Typo3
    risk 0.00cvss —epss 0.01

    PHP remote file inclusion vulnerability in the autoloader in TYPO3 4.3.x before 4.3.3 allows remote attackers to execute arbitrary PHP code via a URL in an input field associated with the className variable.

  • CVE-2010-1218Mar 30, 2010
    TYPO3
    mm_forum
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the mm_forum extension 1.8.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2009-4740Mar 26, 2010
    TYPO3
    Webesse E-Card
    risk 0.00cvss —epss 0.01

    Directory traversal vulnerability in the Webesse E-Card (ws_ecard) extension 1.0.2 and earlier for TYPO3 has unspecified impact and remote attack vectors.

  • CVE-2010-1027Mar 19, 2010
    TYPO3
    Meet Travelmates
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Meet Travelmates (travelmate) extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2010-1026Mar 19, 2010
    TYPO3
    CleanDB
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the CleanDB - DBAL (tmsw_cleandb) extension 2.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2010-1025Mar 19, 2010
    TYPO3
    TGM-Newsletter
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the TGM-Newsletter (tgm_newsletter) extension 0.0.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-1024Mar 19, 2010
    TYPO3
    TGM-Newsletter
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the TGM-Newsletter (tgm_newsletter) extension 0.0.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2010-1023Mar 19, 2010
    TYPO3
    taskcenter_recent
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the UserTask Center, Recent (taskcenter_recent) extension 0.1.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-1021Mar 19, 2010
    TYPO3
    t3quixplorer
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Typo3 Quixplorer (t3quixplorer) extension before 1.7.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-1020Mar 19, 2010
    TYPO3
    Simple Gallery
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Simple Gallery (sk_simplegallery) extension 0.0.9 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-1019Mar 19, 2010
    TYPO3
    Simple Gallery
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Simple Gallery (sk_simplegallery) extension 0.0.9 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2010-1018Mar 19, 2010
    TYPO3
    Book Reviews
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Book Reviews (sk_bookreview) extension 0.0.12 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2010-1017Mar 19, 2010
    TYPO3
    SAV Filter Months
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the SAV Filter Months (sav_filter_months) extension before 1.0.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2010-1016Mar 19, 2010
    TYPO3
    SAV Filter Selectors
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the SAV Filter Selectors (sav_filter_selectors) extension before 1.0.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2010-1015Mar 19, 2010
    TYPO3
    SAV Filter Alphabetic
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the SAV Filter Alphabetic (sav_filter_abc) extension before 1.0.9 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2010-1014Mar 19, 2010
    TYPO3
    Reports Logfile View
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Reports Logfile View (reports_logview) extension 1.2.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-1013Mar 19, 2010
    TYPO3
    Diocese of Portsmouth Database
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Diocese of Portsmouth Database (pd_diocesedatabase) extension before 0.7.13 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2010-1012Mar 19, 2010
    TYPO3
    nf_cleandb
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the CleanDB (nf_cleandb) extension 1.0.7 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2010-1011Mar 19, 2010
    TYPO3
    myDashboard
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the myDashboard (mydashboard) extension 0.1.13 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-1010Mar 19, 2010
    TYPO3
    MK Wastebasket
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the MK Wastebasket (mk_wastebasket) extension 2.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2010-1009Mar 19, 2010
    TYPO3
    Educator
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Educator extension 0.1.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2010-1008Mar 19, 2010
    TYPO3
    chsellector
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Sellector.com Widget Integration (chsellector) extension before 0.1.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-1007Mar 19, 2010
    TYPO3
    ch_lightem
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Power Extension Manager (ch_lightem) extension 1.0.34 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors.

  • CVE-2010-1006Mar 19, 2010
    TYPO3
    Brainstorming extension
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Brainstorming extension 0.1.8 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2010-1005Mar 19, 2010
    TYPO3
    YATSE
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Yet another TYPO3 search engine (YATSE) extension before 0.3.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-1004Mar 19, 2010
    TYPO3
    Yet another TYPO3 search engine (YATSE)
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Yet another TYPO3 search engine (YATSE) extension before 0.3.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-4711Mar 15, 2010
    TYPO3
    CoolURI
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the CoolURI (cooluri) extension before 1.0.16 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2008-6686.

  • CVE-2009-4710Mar 15, 2010
    TYPO3
    cwt_resetbepassword
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Reset backend password (cwt_resetbepassword) extension 1.20 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-4709Mar 15, 2010
    TYPO3
    datamints Newsticker
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the datamints Newsticker (datamints_newsticker) extension before 0.7.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-4708Mar 15, 2010
    TYPO3
    Front End News Submitter
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the [Gobernalia] Front End News Submitter (gb_fenewssubmit) extension 0.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-4707Mar 15, 2010
    TYPO3
    Front End News Submitter
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the [Gobernalia] Front End News Submitter (gb_fenewssubmit) extension 0.1.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2009-4706Mar 15, 2010
    TYPO3
    Mailform
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Mailform (mailform) extension before 0.9.24 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2009-4705Mar 15, 2010
    TYPO3
    Twitter Search
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Twitter Search (twittersearch) extension before 0.1.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2009-4704Mar 15, 2010
    TYPO3
    Ws Ecard
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the Webesse E-Card (ws_ecard) extension 1.0.2 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors.

  • CVE-2009-4703Mar 15, 2010
    TYPO3
    Webesse Image Gallery (ws_gallery)
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Webesse Image Gallery (ws_gallery) extension 1.0.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-4702Mar 15, 2010
    TYPO3
    pm_tour
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Tour Extension (pm_tour) extension before 0.0.13 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2009-4701Mar 15, 2010
    TYPO3
    myth_download
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the Myth download (myth_download) extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2010-0798Mar 2, 2010
    TYPO3
    T3BLOG
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the T3BLOG extension 0.6.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  • CVE-2010-0797Mar 2, 2010
    TYPO3
    T3BLOG
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the T3BLOG extension 0.6.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-0286Feb 22, 2010
    TYPO3
    Typo3
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the OpenID Identity Authentication extension in TYPO3 4.3.0 allows remote attackers to bypass authentication and gain access to a backend user account via unknown attack vectors in which both the attacker and victim have an OpenID provider that…

  • CVE-2010-0350Jan 15, 2010
    TYPO3
    Photo Book (goof_fotoboek)
    risk 0.00cvss —epss 0.01

    Directory traversal vulnerability in the Photo Book (goof_fotoboek) extension 1.7.14 and earlier for TYPO3 has unknown impact and remote attack vectors.

Page 8 of 12