Skip to contentTypo3 vulnerabilities
Newest
- typo3Typo3 Backend API XSS VulnerabilityCVE-2012-6147Fix available3.5 Low
- typo3Typo3 Backend History Module Vulnerable to XSSCVE-2012-6146Fix available4.0 Medium
- typo3Typo3 Backend History Module Vulnerable to XSSCVE-2012-6145Fix available3.5 Low
- typo3Typo3 Backend History Module Vulnerable to SQL InjectionCVE-2012-6144Fix available6.5 Medium
- typo3Typo3 Extbase Framework Unsafe DeserializationCVE-2012-1605Fix available5.0 Medium
- typo3Typo3 Install Tool XSS VulnerabilityCVE-2012-3531Fix available4.3 Medium
- typo3Typo3 API XSS VulnerabilityCVE-2012-3530Fix available4.3 Medium
- typo3Typo3 Backend Configuration XSS VulnerabilityCVE-2012-3529Fix available3.5 Low
- typo3Typo3 Backend XSS VulnerabilityCVE-2012-3528Fix available3.5 Low
- typo3, debian linux +1 moreTYPO3 allows remote authenticated backend users to unserialize arbitrary objectsCVE-2012-3527Fix available4.6 Medium
- typo3TYPO3 Path Traversal vulnerabilityCVE-2010-5099Public exploitFix available6.8 Medium
- typo3TYPO3 Sensitive Information Disclosure via escapeStrForLike methodCVE-2010-5104Fix available4.3 Medium
- typo3TYPO3 SQL Injection vulnerabilityCVE-2010-5103Fix available6.0 Medium
- typo3Directory traversal vulnerability in mod/tools/em/class.em_unzip.php in the unzip library in...CVE-2010-51025.0 Medium
- typo3TYPO3 Directory Traversal vulnerabilityCVE-2010-5101Fix available4.0 Medium
- typo3TYPO3 Cross-Site Scripting vulnerability in the Install ToolCVE-2010-5100Fix available3.5 Low
- typo3TYPO3 Cross-site scripting (XSS) vulnerability in the FORM content objectCVE-2010-5098Fix available3.5 Low
- typo3TYPO3 Cross-site scripting (XSS) vulnerability in the click enlarge functionalityCVE-2010-5097Fix available2.6 Low
- typo3Typo3 Exception Handler XSSCVE-2012-2112Fix available4.3 Medium
- typo3Typo3 API XSS VulnerabilitiesCVE-2012-1608Fix available5.0 Medium
- typo3TYPO3 allows remote attackers to obtain the database name via a direct requestCVE-2012-16075.0 Medium
- typo3Typo3 Backend XSS VulnerabilitiesCVE-2012-1606Fix available3.5 Low
- typo3PHP remote file inclusion vulnerability in Classes/Controller/AbstractController.php in the...CVE-2011-4614Public exploit6.8 Medium
- typo3 aeurltoolCross-site scripting (XSS) vulnerability in the UrlTool (aeurltool) extension 0.1.0 for TYPO3...CVE-2012-10864.3 Medium
- typo3 beuserswitchUnspecified vulnerability in the BE User Switch (beuserswitch) extension 0.0.1 for TYPO3 allows...CVE-2012-10855.0 Medium
- typo3 beuserswitchCross-site scripting (XSS) vulnerability in the BE User Switch (beuserswitch) extension 0.0.1 for...CVE-2012-10844.3 Medium
- typo3 terminalCross-site request forgery (CSRF) vulnerability in the Terminal PHP Shell (terminal) extension 0...CVE-2012-10836.8 Medium
- typo3 terminalCross-site scripting (XSS) vulnerability in the Terminal PHP Shell (terminal) extension 0.3.2 and...CVE-2012-10823.5 Low
- typo3 skt eurocalcCross-site scripting (XSS) vulnerability in the Euro Calculator (skt_eurocalc) extension 0.0.1...CVE-2012-10804.3 Medium
- typo3 mm whtpprSQL injection vulnerability in the White Papers (mm_whtppr) extension 0.0.4 and earlier for TYPO3...CVE-2012-10747.5 High
- typo3 toi categoryCross-site scripting (XSS) vulnerability in the Category-System (toi_category) extension 0.6.0...CVE-2012-10734.3 Medium
- typo3 toi categorySQL injection vulnerability in the Category-System (toi_category) extension 0.6.0 and earlier for...CVE-2012-10727.5 High
- typo3Typo3 Improper Access ControlCVE-2011-4904Fix available6.5 Medium
- typo3Typo3 XSS in RemoveXSS functionCVE-2011-4903Fix available6.1 Medium
- typo3Typo3 Arbitrary File DeleteCVE-2011-4902Fix available6.5 Medium
- typo3Typo3 Arbitrary Information DisclosureCVE-2011-4901Fix available6.5 Medium
- typo3, debian linux +1 moreTypo3 Information DisclosureCVE-2011-4900Fix available6.5 Medium
- typo3Typo3 XSS VulnerabilitiesCVE-2011-4632Fix available5.4 Medium
- typo3Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4...CVE-2011-46315.4 Medium
- typo3Typo3 XSS VulnerabilityCVE-2011-4630Fix available5.4 Medium
- typo3Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4...CVE-2011-46295.4 Medium
- typo3Typo3 Authentication BypassCVE-2011-4628Fix available9.8 Critical
- typo3Typo3 Information DisclosureCVE-2011-4627Fix available6.5 Medium
- typo3Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4...CVE-2011-46266.1 Medium
- typo3Unspecified vulnerability in the Extension Manager in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3...CVE-2010-40684.9 Medium
- typo3The t3lib_div::validEmail function in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x...CVE-2010-37175.0 Medium
- typo3The be_user_creation task in TYPO3 4.2.x before 4.2.15 and 4.3.x before 4.3.7 allows remote...CVE-2010-37166.0 Medium
- typo3TYPO3 cross-site scripting (XSS) vulnerability in the RemoveXSS function and the backendCVE-2010-3715Fix available4.3 Medium
- typo3TYPO3 Remote File Disclosure vulnerability in the jumpUrl mechanismCVE-2010-3714Public exploitFix availableEPSS 24.1%7.1 High
- typo3, debian linux +1 moreTYPO3 before 4.4.1 allows XSS in the frontend search box.CVE-2010-36746.1 Medium
- Show moreLoading…