TYPO3 vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
456 matching records
- Low2.6Cross-site scripting (XSS) vulnerability in the click enlarge functionality in TYPO3 4.3.x before 4.3.9 and 4.4.x before 4.4.5 when the caching framework is enabled, a…Check if you run itEPSS 1.61%May 21, 2012
- Medium6.8PHP remote file inclusion vulnerability in Classes/Controller/AbstractController.php in the workspaces system extension in TYPO3 4.5.x before 4.5.9, 4.6.x before 4.6.2…Check if you run itEPSS 5.51%Feb 18, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in the Post data records to facebook (bc_post2facebook) extension before 0.2.2 for TYPO3 allows remote attackers to inject arb…Check if you run itEPSS 1.04%Feb 14, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in the UrlTool (aeurltool) extension 0.1.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspec…Check if you run itEPSS 1.04%Feb 14, 2012
- Medium5.0Unspecified vulnerability in the BE User Switch (beuserswitch) extension 0.0.1 for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors.Check if you run itEPSS 1.24%Feb 14, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in the BE User Switch (beuserswitch) extension 0.0.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML…Check if you run itEPSS 1.05%Feb 14, 2012
- Medium6.8Cross-site request forgery (CSRF) vulnerability in the Terminal PHP Shell (terminal) extension 0.3.2 and earlier for TYPO3 allows remote attackers to hijack the authen…Check if you run itEPSS 0.59%Feb 14, 2012
- Low3.5Cross-site scripting (XSS) vulnerability in the Terminal PHP Shell (terminal) extension 0.3.2 and earlier for TYPO3 allows remote authenticated users to inject arbitra…Check if you run itEPSS 0.85%Feb 14, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in the Yet another Google search (ya_googlesearch) extension before 0.3.10 for TYPO3 allows remote attackers to inject arbitra…Check if you run itEPSS 1.05%Feb 14, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in the Euro Calculator (skt_eurocalc) extension 0.0.1 allows remote attackers to inject arbitrary web script or HTML via unspe…Check if you run itEPSS 1.04%Feb 14, 2012
- Medium6.5Unspecified vulnerability in the Webservices for TYPO3 (typo3_webservice) extension before 0.3.8 for TYPO3 allows remote authenticated users to execute arbitrary code…Check if you run itEPSS 1.90%Feb 14, 2012
- Medium5.0The System Utilities (sysutils) extension 1.0.3 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unspecified vectors related to improp…Check if you run itEPSS 1.28%Feb 14, 2012
- High7.5SQL injection vulnerability in the Post data records to facebook (bc_post2facebook) extension before 0.2.2 for TYPO3 allows remote attackers to execute arbitrary SQL c…Check if you run itEPSS 1.10%Feb 14, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in the Documents download (rtg_files) extension before 1.5.2 for TYPO3 allows remote attackers to inject arbitrary web script…Check if you run itEPSS 1.22%Feb 14, 2012
- High7.5SQL injection vulnerability in the Documents download (rtg_files) extension before 1.5.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspec…Check if you run itEPSS 1.29%Feb 14, 2012
- High7.5SQL injection vulnerability in the White Papers (mm_whtppr) extension 0.0.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.11%Feb 14, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in the Category-System (toi_category) extension 0.6.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web sc…Check if you run itEPSS 1.05%Feb 14, 2012
- High7.5SQL injection vulnerability in the Category-System (toi_category) extension 0.6.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via u…Check if you run itEPSS 1.11%Feb 14, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in the Modern FAQ (irfaq) extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows remote attackers to inject arbitrar…Check if you run itEPSS 1.05%Feb 14, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in lib/class.tx_jftcaforms_tceFunc.php in the Additional TCA Forms (jftcaforms) extension before 0.2.1 for TYPO3 allows remote…Check if you run itEPSS 1.05%Feb 14, 2012
- Medium5.8Open redirect vulnerability in the Modern FAQ (irfaq) extension 1.1.2 and other versions before 1.1.4 for TYPO3 allows remote attackers to redirect users to arbitrary…Check if you run itEPSS 1.10%Feb 14, 2012
- High7.5mathieu_vidal mv_cooking Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.29%Feb 2, 2012
- High7.5Unspecified vulnerability in the Webkit PDFs (webkitpdf) extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary commands via unknown vectors.Check if you run itEPSS 1.86%Oct 9, 2011
- High7.5SQL injection vulnerability in the Webkit PDFs (webkitpdf) extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.Check if you run itEPSS 1.08%Oct 9, 2011
- Medium4.3Cross-site scripting (XSS) vulnerability in the Branchenbuch (aka Yellow Pages or mh_branchenbuch) extension before 0.9.1 for TYPO3 allows remote attackers to inject a…Check if you run itEPSS 1.22%Oct 9, 2011