TYPO3 vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
456 matching records
- High7.5SQL injection vulnerability in the Questionnaire (ke_questionnaire) extension before 2.2.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unsp…Check if you run itEPSS 1.26%Oct 9, 2011
- Medium4.3Cross-site scripting (XSS) vulnerability in the Questionnaire (ke_questionnaire) extension before 2.2.3 for TYPO3 allows remote attackers to inject arbitrary web scrip…Check if you run itEPSS 1.22%Oct 9, 2011
- Critical10.0Unspecified vulnerability in the JW Calendar (jw_calendar) extension 1.3.20 and earlier for TYPO3 allows remote attackers to execute arbitrary code via unknown vectors.Check if you run itEPSS 3.28%Oct 9, 2011
- High7.5SQL injection vulnerability in the FE user statistic (festat) extension before 0.2.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.08%Oct 9, 2011
- Medium4.3Cross-site scripting (XSS) vulnerability in the xaJax Shoutbox (vx_xajax_shoutbox) extension before 1.0.1 for TYPO3 allows remote attackers to inject arbitrary web scr…Check if you run itEPSS 1.04%Oct 9, 2011
- High7.5SQL injection vulnerability in the Event (event) extension before 0.3.7 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.00%Oct 9, 2011
- Medium4.3Cross-site scripting (XSS) vulnerability in the powermail extension before 1.5.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.Check if you run itEPSS 1.04%Oct 7, 2011
- High7.5SQL injection vulnerability in the Yet Another Calendar (ke_yac) extension before 1.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.07%Oct 7, 2011
- Medium4.3Cross-site scripting (XSS) vulnerability in the Yet Another Calendar (ke_yac) extension before 1.1.2 for TYPO3 allows remote attackers to inject arbitrary web script o…Check if you run itEPSS 1.04%Oct 7, 2011
- Critical10.0Unspecified vulnerability in the Tiny Market (hm_tinymarket) extension 0.5.4 and earlier for TYPO3 allows attackers to execute arbitrary code via unknown vectors.Check if you run itEPSS 2.12%Oct 7, 2011
- High7.5SQL injection vulnerability in the Tiny Market (hm_tinymarket) extension 0.5.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unsp…Check if you run itEPSS 1.01%Oct 7, 2011
- High7.5SQL injection vulnerability in the Commenting system Backend Module (commentsbe) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL…Check if you run itEPSS 1.01%Oct 7, 2011
- Medium4.3Cross-site scripting (XSS) vulnerability in the "official twitter tweet button for your page" (tweetbutton) extension before 1.0.5 for TYPO3 allows remote attackers to…Check if you run itEPSS 1.05%Oct 7, 2011
- Medium4.3Cross-site scripting (XSS) vulnerability in the XING Button (xing) extension before 1.0.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via…Check if you run itEPSS 1.05%Oct 7, 2011
- High7.5Unspecified vulnerability in the Drag Drop Mass Upload (ameos_dragndropupload) extension 2.0.2 and earlier for TYPO3 allows remote attackers to upload arbitrary files…Check if you run itEPSS 1.37%Oct 4, 2011
- High7.5webempoweredchurch wec_discussion Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.30%Apr 7, 2011
- Medium4.9CVE-2010-4068 is listed by inventory_high.Check if you run itEPSS 0.88%Oct 25, 2010
- Medium5.0CVE-2010-3717 is listed by inventory_high.Check if you run itEPSS 1.43%Oct 25, 2010
- Medium6.0The be_user_creation task in TYPO3 4.2.x before 4.2.15 and 4.3.x before 4.3.7 allows remote authenticated users to gain privileges via a crafted POST request that crea…Check if you run itEPSS 0.97%Oct 25, 2010
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 allow remote attackers to inject arbitrary…Check if you run itEPSS 1.06%Oct 25, 2010
- High7.1The jumpUrl (aka access tracking) implementation in tslib/class.tslib_fe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly…Check this weekEPSS 24.13%Oct 25, 2010
- Medium5.0Unspecified vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to bypass validation have an unspecified impact by "[injecting…Check if you run itEPSS 1.21%Sep 29, 2010
- Medium4.3Cross-site scripting (XSS) vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unsp…Check if you run itEPSS 1.02%Sep 24, 2010
- High7.5SQL injection vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.05%Sep 24, 2010
- High7.5SQL injection vulnerability in the AJAX Chat (vjchat) extension before 0.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.05%Jul 28, 2010