TYPO3 vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
456 matching records
- Medium4.0The Authentication component in TYPO3 before 6.2, when salting for password hashing is disabled, does not require knowledge of the cleartext password if the password h…Check if you run itEPSS 1.64%Jun 3, 2014
- Medium5.8The Authentication component in TYPO3 6.2.0 before 6.2.3 does not properly invalidate timed out user sessions, which allows remote attackers to bypass authentication v…Check if you run itEPSS 1.31%Jun 3, 2014
- Low3.5Multiple cross-site scripting (XSS) vulnerabilities in unspecified backend components in TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, 6.1.0 bef…Check if you run itEPSS 1.45%Jun 3, 2014
- Medium6.0The Color Picker Wizard component in TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, and 6.1.0 before 6.1.9 allows remote authenticated editors to…Check if you run itEPSS 1.63%Jun 3, 2014
- Medium5.0TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, 6.1.0 before 6.1.9, and 6.2.0 before 6.2.3 allows remote attackers to have unspecified impact via…Check if you run itEPSS 2.71%Jun 3, 2014
- Medium6.5CVE-2013-4321 is listed by inventory_high.Check if you run itEPSS 1.12%May 20, 2014
- Medium5.5The File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.9 and 6.1.x before 6.1.4 does not properly check permissions, which allows remote authenticated users to cre…Check if you run itEPSS 0.98%May 20, 2014
- Medium6.5The (1) file upload component and (2) File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.8 and 6.1.x before 6.1.3 do not properly check file extensions, which allo…Check if you run itEPSS 1.15%May 20, 2014
- Medium4.0The Backend History Module in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 does not properly restrict access, which allows remote authenticat…Check if you run itEPSS 0.99%May 20, 2014
- Unknownkennziffer statistics Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.69%Feb 12, 2014
- Low2.6CVE-2013-7078 is listed by inventory_high.Check if you run itEPSS 1.64%Jan 19, 2014
- Medium4.9The (old) Form Content Element component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote authenticated…Check if you run itEPSS 1.02%Dec 23, 2013
- Medium5.8The creating record functionality in Extension table administration library (feuser_adminLib.inc) in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, and 6.0.0 throug…Check if you run itEPSS 1.21%Dec 23, 2013
- Medium5.8Open redirect vulnerability in the OpenID extension in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote at…Check if you run itEPSS 1.21%Dec 23, 2013
- Medium6.5The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote authenticated ba…Check if you run itEPSS 1.27%Dec 23, 2013
- Medium4.0The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 does not check permissions, wh…Check if you run itEPSS 1.26%Dec 23, 2013
- Medium4.3Cross-site scripting (XSS) vulnerability in the Backend User Administration Module in TYPO3 6.0.x before 6.0.12 and 6.1.x before 6.1.7 allows remote attackers to injec…Check if you run itEPSS 1.19%Dec 21, 2013
- Medium4.3Cross-site scripting (XSS) vulnerability in Extension Manager in TYPO3 4.5.x before 4.5.32 and 4.7.x before 4.7.17 allows remote attackers to inject arbitrary web scri…Check if you run itEPSS 1.35%Dec 21, 2013
- Low3.5Multiple cross-site scripting (XSS) vulnerabilities in Content Editing Wizards in TYPO3 4.5.x before 4.5.32, 4.7.x before 4.7.17, 6.0.x before 6.0.12, 6.1.x before 6.1…Check if you run itEPSS 1.09%Dec 21, 2013
- Medium4.3Cross-site scripting (XSS) vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 allows remote attackers to inject arbitrary web script or…Check if you run itEPSS 1.81%Oct 28, 2013
- Critical10.0Unspecified vulnerability in the Apache Solr for TYPO3 (solr) extension before 2.8.3 for TYPO3 has unknown impact and remote attack vectors, related to "Insecure Unserialize."Check if you run itEPSS 2.23%Oct 28, 2013
- Medium4.3Cross-site scripting (XSS) vulnerability in the Javascript and CSS Optimizer extension before 1.1.14 for TYPO3 allows remote attackers to inject arbitrary web script o…Check if you run itEPSS 1.16%Aug 23, 2013
- High7.5SQL injection vulnerability in the Slideshare extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.21%Aug 23, 2013
- Medium4.3Cross-site scripting (XSS) vulnerability in the Static Info Tables (static_info_tables) extension before 2.3.1 for TYPO3 allows remote attackers to inject arbitrary we…Check if you run itEPSS 1.28%Aug 20, 2013
- High7.5SQL injection vulnerability in the CoolURI extension before 1.0.30 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.35%Aug 20, 2013