Skip to contentTypo3 vulnerabilities
Newest
- typo3TYPO3 is vulnerable to Information Disclosure in the HTML mailing APICVE-2010-3673Fix available5.3 Medium
- typo3TYPO3 vulnerable to Cross-Site Scripting in the textarea view helperCVE-2010-3672Fix available6.1 Medium
- typo3TYPO3 is vulnerable to Session FixationCVE-2010-3671Fix available6.5 Medium
- typo3TYPO3 is vulnerable to insecure randomness during hash generation in forgot password functionCVE-2010-3670Fix available4.8 Medium
- typo3TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS and Open Redirection in...CVE-2010-36695.4 Medium
- typo3TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Header...CVE-2010-36687.5 High
- typo3TYPO3 is vulnerable to Spam Abuse in the native form content elementCVE-2010-3667Fix available5.3 Medium
- typo3TYPO3 is vulnerable to Insecure randomness in uniqid functionCVE-2010-3666Fix available5.3 Medium
- typo3TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS on...CVE-2010-36655.4 Medium
- typo3TYPO3 is vulnerable to Information Disclosure on the backendCVE-2010-3664Fix available6.5 Medium
- typo3TYPO3 Arbitrary Code Execution vulnerability on the backendCVE-2010-3663Fix available8.8 High
- typo3TYPO3 SQL injection vulnerability on the backendCVE-2010-3662Fix available8.8 High
- typo3TYPO3 Open Redirection vulnerability on the backendCVE-2010-3661Fix available6.1 Medium
- typo3TYPO3 is vulnerable to Cross-Site Scripting (XSS) on the backendCVE-2010-3660Fix available5.4 Medium
- typo3TYPO3 Cross-site Scripting vulnerability in the extension manager and backend formsCVE-2010-3659Fix available5.4 Medium
- typo3 sbannerSQL injection vulnerability in the Solidbase Bannermanagement (SBbanner) extension 1.0.1 for...CVE-2009-49697.5 High
- typo3 commerce extensionCommerce extension for TYPO3 vulnerable to Cross-site ScriptingCVE-2009-4963Fix available3.5 Low
- typo3** DISPUTED ** SQL injection vulnerability in index.php in TYPO3 4.0 allows remote attackers to...CVE-2009-4855Public exploitDisputed7.5 High
- typo3TYPO3 PHP remote file inclusion vulnerabilityCVE-2010-1153Fix available6.8 Medium
- typo3 ws ecardDirectory traversal vulnerability in the Webesse E-Card (ws_ecard) extension 1.0.2 and earlier...CVE-2009-47407.5 High
- typo3 brainstormingSQL injection vulnerability in the Brainstorming extension 0.1.8 and earlier for TYPO3 allows...CVE-2010-10067.5 High
- typo3 ws ecardUnspecified vulnerability in the Webesse E-Card (ws_ecard) extension 1.0.2 and earlier for TYPO3...CVE-2009-47045.0 Medium
- typo3 ws gallerySQL injection vulnerability in the Webesse Image Gallery (ws_gallery) extension 1.0.4 and earlier...CVE-2009-47037.5 High
- typo3Unspecified vulnerability in the OpenID Identity Authentication extension in TYPO3 4.3.0 allows...CVE-2010-02865.1 Medium
- typo3 vd gemomapCross-site scripting (XSS) vulnerability in the VD / Geomap (vd_geomap) extension 0.3.1 and...CVE-2010-03474.3 Medium
- typo3 mimi tipfriendsCross-site scripting (XSS) vulnerability in the Tip many friends (mimi_tipfriends) extension 0.0...CVE-2010-03464.3 Medium
- typo3 majordomoCross-site scripting (XSS) vulnerability in the Majordomo extension 1.1.3 and earlier for TYPO3...CVE-2010-03454.3 Medium
- typo3 zak store managementSQL injection vulnerability in the zak_store_management extension 1.0.0 and earlier TYPO3 allows...CVE-2010-03447.5 High
- typo3 pb clanlistSQL injection vulnerability in the Clan Users List (pb_clanlist) extension 0.0.1 for TYPO3 allows...CVE-2010-03437.5 High
- typo3 job reportsSQL injection vulnerability in the Reports for Job (job_reports) extension 0.1.0 and earlier for...CVE-2010-03427.5 High
- typo3 bb simplejobsSQL injection vulnerability in the BB Simple Jobs (bb_simplejobs) extension 0.1.0 and earlier for...CVE-2010-03417.5 High
- typo3 mjseventproSQL injection vulnerability in the MJS Event Pro (mjseventpro) extension 0.2.1 and earlier for...CVE-2010-03407.5 High
- typo3 vm19 userlinksSQL injection vulnerability in the User Links (vm19_userlinks) extension 0.1.1 and earlier for...CVE-2010-03397.5 High
- typo3 ttpeditSQL injection vulnerability in the TT_Products editor (ttpedit) extension 0.0.2 and earlier for...CVE-2010-03387.5 High
- typo3 dl3 tt news alertsSQL injection vulnerability in the tt_news Mail alert (dl3_tt_news_alerts) extension 0.2.0 and...CVE-2010-03377.5 High
- typo3 kiddog mysqldumperUnspecified vulnerability in the kiddog_mysqldumper (kiddog_mysqldumper) extension 0.0.3 and...CVE-2010-03365.0 Medium
- typo3 xds staffSQL injection vulnerability in the XDS Staff List (xds_staff) extension 0.0.3 and earlier for...CVE-2009-43927.5 High
- typo3Typo3 API Install Tool vulnerable to Cross-site ScriptingCVE-2009-3636Fix available4.3 Medium
- typo3TYPO3 Install Tool Subcomponent Allows Access Using Only a Password's MD5 Hash as a CredentialCVE-2009-3635Fix available6.8 Medium
- typo3Cross-site scripting (XSS) vulnerability in the Frontend Login Box (aka felogin) subcomponent in...CVE-2009-36344.3 Medium
- typo3TYPO3 API function vulnerable to Cross-site ScriptingCVE-2009-3633Fix available4.3 Medium
- typo3SQL injection vulnerability in the traditional frontend editing feature in the Frontend Editing...CVE-2009-36326.5 Medium
- typo3TYPO3 Backend Command Injection via Shell Metacharacters in Uploaded File NameCVE-2009-3631Fix available8.5 High
- typo3TYPO3 Backend vulnerable to Frame HijackingCVE-2009-3630Fix available5.5 Medium
- typo3TYPO3 Backend vulnerable to Cross-site ScriptingCVE-2009-3629Fix available3.5 Low
- typo3TYPO3 Backend Discloses Encryption KeyCVE-2009-3628Fix available4.0 Medium
- typo3, typo3 tjs reslib +1 moreCross-site scripting (XSS) vulnerability in Resource Library (tjs_reslib) 0.1.0 and earlier...CVE-2008-66994.3 Medium
- typo3 nd antispamUnspecified vulnerability in nepa-design.de Spam Protection (nd_antispam) extension 1.0.3 for...CVE-2008-66907.5 High
- typo3 wt galleryDirectory traversal vulnerability in the wt_gallery extension 2.5.0 and earlier for TYPO3 allows...CVE-2008-66307.8 High
- typo3 pmk rssnewsexport extensionSQL injection vulnerability in the pmk_rssnewsexport extension for TYPO3 allows remote attackers...CVE-2008-65957.5 High
- Show moreLoading…