Skip to content

Typo3 vulnerabilities

Products

Newest

typo3 dam frontend extensionSQL injection vulnerability in the DAM Frontend (dam_frontend) extension 0.1.0 and earlier for...CVE-2008-30397.5 HighJuly 7, 2008
typo3 address directorySQL injection vulnerability in the Address Directory (sp_directory) extension 0.2.10 and earlier...CVE-2008-30387.5 HighJuly 7, 2008
typo3 address directoryCross-site scripting (XSS) vulnerability in the Address Directory (sp_directory) extension 0.2.10...CVE-2008-30374.3 MediumJuly 7, 2008
typo3 phpmyadminphpMyAdmin extension for TYPO3 has Cross-site Scripting vulnerabilityCVE-2008-3032Fix available4.3 MediumJuly 7, 2008
typo3 wec discussion forumCross-site scripting (XSS) vulnerability in the WEC Discussion Forum (wec_discussion) extension 1...CVE-2008-30294.3 MediumJuly 7, 2008
typo3 send a cardMultiple cross-site scripting (XSS) vulnerabilities in the Send-A-Card (sr_sendcard) extension 2...CVE-2008-30284.3 MediumJuly 7, 2008
typo3Cross-site scripting (XSS) vulnerability in fe_adminlib.inc in TYPO3 4.0.x before 4.0.9, 4.1.x...CVE-2008-27184.3 MediumJune 12, 2008
typo3, apache webserver +1 moreTYPO3 Unrestricted File Upload vulnerabilityCVE-2008-2717Fix available6.5 MediumJune 12, 2008
typo3 wt galleryCross-site scripting (XSS) vulnerability in the WT Gallery (aka wt_gallery) extension 2.6.2 and...CVE-2008-25264.3 MediumJune 3, 2008
typo3 rlmp eventdbCross-site scripting (XSS) vulnerability in the Event Database (aka rlmp_eventdb) extension...CVE-2008-25254.3 MediumJune 3, 2008
typo3 kj imagelightbox2Cross-site scripting (XSS) vulnerability in the KJ Image Lightbox 2 (aka kj_imagelightbox2)...CVE-2008-24904.3 MediumMay 28, 2008
typo3 sg zfelibSQL injection vulnerability in the Library for Frontend Plugins (aka sg_zfelib) extension 1.1.512...CVE-2008-24897.5 HighMay 28, 2008
typo3 air filemanagerUnspecified vulnerability in the air_filemanager 0.6.0 and earlier extension for TYPO3 allows...CVE-2008-234510.0 HighMay 19, 2008
typo3 air filemanagerCross-site scripting (XSS) vulnerability in the air_filemanager 0.6.0 and earlier extension for...CVE-2008-23444.3 MediumMay 19, 2008
typo3 sr feuser register extensionUnspecified vulnerability in sr_feuser_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4...CVE-2008-22757.5 HighMay 16, 2008
typo3 sr feuser register extensionCross-site scripting (XSS) vulnerability in the sr_feuser_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7,...CVE-2008-22744.3 MediumMay 16, 2008
typo3SQL injection vulnerability in the indexed_search system extension in TYPO3 3.x, 4.0 through 4.0...CVE-2007-6381Fix available6.5 MediumDecember 15, 2007
typo3The start function in class.t3lib_formmail.php in TYPO3 before 4.0.5, 4.1beta, and 4.1RC1 allows...CVE-2007-10817.5 HighFebruary 22, 2007
typo3rtehtmlarea/pi1/class.tx_rtehtmlarea_pi1.php in Typo3 4.0.0 through 4.0.3, 3.7 and 3.8 with the...CVE-2006-6690Public exploit7.5 HighDecember 21, 2006
typo3Cross-site scripting (XSS) vulnerability in class.tx_indexedsearch.php in the Indexed Search 2.9...CVE-2006-50692.6 LowSeptember 28, 2006
typo3TYPO3 3.7.1 allows remote attackers to obtain sensitive information via a direct request to (1)...CVE-2006-03275.0 MediumJanuary 21, 2006
typo3TYPO3 Reveals Sensitive Information via Direct Request to `misc/phpcheck/`CVE-2005-4875Fix available7.5 HighDecember 31, 2005