typo3 Vulnerability Advisory Catalog

Total 340 security vulnerabilities recorded for typo3 software and firmware.

← Back to All Vendors
CVE-2008-5795 UNKNOWN
Component: eluna_page_comments_extension

Cross-site scripting (XSS) vulnerability in the eluna Page Comments (eluna_pagecomments) extension 1.1.2 and earlier for TYPO3 allows remote attackers...

📅 2008-12-31
CVSS 4.3 Dossier →
CVE-2008-5656 UNKNOWN
Component: typo3

Cross-site scripting (XSS) vulnerability in the frontend plugin for the felogin system extension in TYPO3 4.2.0, 4.2.1 and 4.2.2 allows remote attacke...

📅 2008-12-17
CVSS 4.3 Dossier →
CVE-2008-5644 UNKNOWN
Component: typo3

Cross-site scripting (XSS) vulnerability in the file backend module in TYPO3 4.2.2 allows remote attackers to inject arbitrary web script or HTML via ...

📅 2008-12-17
CVSS 4.3 Dossier →
CVE-2008-5609 UNKNOWN
Component: typo3

SQL injection vulnerability in the Commerce extension 0.9.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspec...

📅 2008-12-17
CVSS 7.5 Dossier →
CVE-2008-5096 UNKNOWN
Component: typo3

Unspecified vulnerability in the TYPO3 File List (file_list) extension 0.2.1 and earlier allows remote attackers to obtain sensitive information via u...

📅 2008-11-14
CVSS 5.0 Dossier →
CVE-2008-5087 UNKNOWN
Component: typo3

SQL injection vulnerability in TYPO3 Another Backend Login (wrg_anotherbelogin) extension before 0.0.4 allows remote attackers to execute arbitrary SQ...

📅 2008-11-14
CVSS 7.5 Dossier →
CVE-2008-4661 UNKNOWN
Component: typo3

Cross-site scripting (XSS) vulnerability in the Page Improvements (sm_pageimprovements) 1.1.0 and earlier extension for TYPO3 allows remote attackers ...

📅 2008-10-22
CVSS 4.3 Dossier →
CVE-2008-4660 UNKNOWN
Component: m1_intern

SQL injection vulnerability in the M1 Intern (m1_intern) 1.0.0 extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspe...

📅 2008-10-22
CVSS 7.5 Dossier →
CVE-2008-4659 UNKNOWN
Component: mannschaftsliste

SQL injection vulnerability in the Mannschaftsliste (kiddog_playerlist) 1.0.3 and earlier extension for TYPO3 allows remote attackers to execute arbit...

📅 2008-10-22
CVSS 7.5 Dossier →
CVE-2008-4658 UNKNOWN
Component: typo3

SQL injection vulnerability in the JobControl (dmmjobcontrol) 1.15.4 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL ...

📅 2008-10-22
CVSS 7.5 Dossier →
CVE-2008-4657 UNKNOWN
Component: econda_plugin

SQL injection vulnerability in the Econda Plugin (econda) 0.0.2 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL comma...

📅 2008-10-22
CVSS 7.5 Dossier →
CVE-2008-4656 UNKNOWN
Component: frontend_users_view

SQL injection vulnerability in the Frontend Users View (feusersview) 0.1.6 and earlier extension for TYPO3 allows remote attackers to execute arbitrar...

📅 2008-10-22
CVSS 7.5 Dossier →
CVE-2008-4655 UNKNOWN
Component: typo3

SQL injection vulnerability in the Simple survey (simplesurvey) 1.7.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL...

📅 2008-10-22
CVSS 7.5 Dossier →
CVE-2008-4188 UNKNOWN
Component: secure_directory

Unspecified vulnerability in the TYPO3 Secure Directory (kw_secdir) extension before 1.0.2 allows remote attackers to execute arbitrary code via unkno...

📅 2008-09-23
CVSS 10.0 Dossier →
CVE-2008-3056 UNKNOWN
Component: codeon_petition_extension

SQL injection vulnerability in the Codeon Petition (cd_petition) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQ...

📅 2008-07-07
CVSS 7.5 Dossier →
CVE-2008-3055 UNKNOWN
Component: support_view_extension

SQL injection vulnerability in the Support view (ext_tbl) extension 0.0.102 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL com...

📅 2008-07-07
CVSS 7.5 Dossier →
CVE-2008-3054 UNKNOWN
Component: branchenbuch_extension

SQL injection vulnerability in the Branchenbuch (aka Yellow Pages o (mh_branchenbuch) extension 0.8.1 and earlier for TYPO3 allows remote attackers to...

📅 2008-07-07
CVSS 7.5 Dossier →
CVE-2008-3053 UNKNOWN
Component: sql_frontend_extension

SQL injection vulnerability in the SQL Frontend (mh_omsqlio) extension 1.0.11 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL c...

📅 2008-07-07
CVSS 7.5 Dossier →
CVE-2008-3052 UNKNOWN
Component: sql_frontend_extension

Unspecified vulnerability in the SQL Frontend (mh_omsqlio) extension 1.0.11 and earlier for TYPO3 allows remote attackers to cause a denial of service...

📅 2008-07-07
CVSS 7.5 Dossier →
CVE-2008-3051 UNKNOWN
Component: pinboard_extension

SQL injection vulnerability in the Pinboard extension 0.0.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspec...

📅 2008-07-07
CVSS 7.5 Dossier →
CVE-2008-3050 UNKNOWN
Component: pdf_generator_2_extension

Unspecified vulnerability in the PDF Generator 2 (pdf_generator2) extension 0.5.0 and earlier for TYPO3 allows attackers to cause a denial of service ...

📅 2008-07-07
CVSS 5.0 Dossier →
CVE-2008-3049 UNKNOWN
Component: pdf_generator_2_extension

The PDF Generator 2 (pdf_generator2) extension 0.5.0 and earlier for TYPO3 allows attackers to obtain sensitive information via unspecified vectors....

📅 2008-07-07
CVSS 5.0 Dossier →
CVE-2008-3048 UNKNOWN
Component: pdf_generator_2_extension

Unspecified vulnerability in the PDF Generator 2 (pdf_generator2) extension 0.5.0 and earlier for TYPO3 has unknown impact and attack vectors related ...

📅 2008-07-07
CVSS 7.5 Dossier →
CVE-2008-3047 UNKNOWN
Component: kb_unpack_extension

Incomplete blacklist vulnerability in the KB Unpack (kb_unpack) extension 0.1.0 and earlier for TYPO3 has unknown impact and attack vectors....

📅 2008-07-07
CVSS 7.5 Dossier →
Page 13 of 15 (340 Total Records)