TYPO3 vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
456 matching records
- High7.5SQL injection vulnerability in the Car (car) extension 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.01%Dec 22, 2009
- Medium5.0Unspecified vulnerability in the Watchdog (aba_watchdog) extension 2.0.2 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown attack vectors.Check if you run itEPSS 1.06%Dec 22, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in the ListMan (nl_listman) extension 1.2.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspe…Check if you run itEPSS 0.84%Dec 22, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in the Frontend news submitter with RTE (fe_rtenews) extension 1.4.1 and earlier for TYPO3 allows remote attackers to inject a…Check if you run itEPSS 0.84%Dec 17, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in the vShoutbox (vshoutbox) extension 0.0.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unsp…Check if you run itEPSS 1.02%Dec 17, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in the ZID Linkliste (zid_linklist) extension 1.0.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML v…Check if you run itEPSS 1.02%Dec 17, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in the Training Company Database (trainincdb) extension 0.4.7 for TYPO3 allows remote attackers to inject arbitrary web script…Check if you run itEPSS 1.02%Dec 17, 2009
- High7.5SQL injection vulnerability in the Job Exchange (jobexchange) extension 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.Check if you run itEPSS 1.05%Dec 17, 2009
- High7.5SQL injection vulnerability in the No indexed Search (no_indexed_search) extension 0.2.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.Check if you run itEPSS 1.05%Dec 17, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in the No indexed Search (no_indexed_search) extension 0.2.0 for TYPO3 allows remote attackers to inject arbitrary web script…Check if you run itEPSS 1.02%Dec 17, 2009
- High7.5SQL injection vulnerability in the Subscription (mf_subscription) extension 0.2.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.Check if you run itEPSS 1.05%Dec 17, 2009
- High7.5SQL injection vulnerability in the Flash SlideShow (slideshow) extension 0.2.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.Check if you run itEPSS 1.05%Dec 17, 2009
- High7.5CVE-2009-4337 is listed by inventory_high.Check if you run itEPSS 1.67%Dec 17, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in the Diocese of Portsmouth Calendar (pd_calendar) extension 0.4.1 and earlier for TYPO3 allows remote attackers to inject ar…Check if you run itEPSS 1.02%Dec 17, 2009
- Medium6.4Unspecified vulnerability in the Automatic Base Tags for RealUrl (lt_basetag) extension 1.0.0 for TYPO3 allows remote attackers to conduct "Cache spoofing" attacks via…Check if you run itEPSS 1.08%Dec 2, 2009
- High7.5SQL injection vulnerability in the Trips (mchtrips) extension 2.0.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.00%Dec 2, 2009
- High7.5SQL injection vulnerability in the simple Glossar (simple_glossar) extension 1.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via…Check if you run itEPSS 1.01%Dec 2, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in the simple Glossar (simple_glossar) extension 1.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web s…Check if you run itEPSS 0.85%Dec 2, 2009
- High7.5SQL injection vulnerability in the TW Productfinder (tw_productfinder) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands…Check if you run itEPSS 1.01%Dec 2, 2009
- High7.2Unspecified vulnerability in the DB Integration (wfqbe) extension 1.3.1 and earlier for TYPO3 allows local users to execute arbitrary commands via unspecified vectors.Check if you run itEPSS 0.35%Dec 2, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in the [AN] Search it! (an_searchit) extension 2.4.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web scr…Check if you run itEPSS 0.84%Dec 2, 2009
- Medium5.0Unspecified vulnerability in the Simple download-system with counter and categories (kk_downloader) extension 1.2.1 and earlier for TYPO3 allows remote attackers to ob…Check if you run itEPSS 1.21%Dec 2, 2009
- Low3.5Cross-site scripting (XSS) vulnerability in the newsletter configuration feature in the backend module in the Direct Mail (direct_mail) extension 2.6.4 and earlier for…Check if you run itEPSS 0.84%Dec 2, 2009
- High7.5SQL injection vulnerability in the Calendar Base (cal) extension before 1.2.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.06%Dec 2, 2009
- Medium4.3Cross-site scripting (XSS) vulnerability in the Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3be…Check if you run itEPSS 1.96%Nov 2, 2009