← Back

Joachim Ruhs

joachim-ruhs

9 CVEs • 5 products

Products (5)

Click to collapse
Toggle
Locator
locator
5 CVEs
Educator
educator
1 CVE
Flat Manager
flat_manager
1 CVE
Event
event
1 CVE
Festat
festat
1 CVE

CVEs (9)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2013-5305
1Joachim Ruhs
1Locator
Apr 29, 2026
Aug 16, 2013
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2013-5304
1Joachim Ruhs
1Locator
Apr 29, 2026
Aug 16, 2013
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2013-5303
1Joachim Ruhs
1Locator
Apr 29, 2026
Aug 16, 2013
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 has unknown impact and remote attack vectors, related to "Insecure Unserialize."
CVE-2010-4952
1Joachim Ruhs
1Festat
Apr 29, 2026
Oct 9, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the FE user statistic (festat) extension before 0.2.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2010-4950
1Joachim Ruhs
1Event
Apr 29, 2026
Oct 9, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the Event (event) extension before 0.3.7 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2009-4949
1Joachim Ruhs
1Locator
Apr 29, 2026
Jul 22, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the Store Locator extension before 1.2.8 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2009-4948
1Joachim Ruhs
1Locator
Apr 29, 2026
Jul 22, 2010
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the Store Locator extension before 1.2.8 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2009-4802
1Joachim Ruhs
1Flat Manager
Apr 29, 2026
Apr 23, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the Flat Manager (flatmgr) extension before 1.9.16 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2010-1009
1Joachim Ruhs
1Educator
Apr 29, 2026
Mar 19, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the Educator extension 0.1.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.