← Back

Typo3

typo3

315 CVEs • 78 products

Products (78)

Click to collapse
Toggle
Typo3
typo3
218 CVEs
Wec Discussion Forum
wec_discussion_forum
4 CVEs
Dam Frontend Extension
dam_frontend_extension
4 CVEs
Html Sanitizer
html_sanitizer
4 CVEs
Pdf Generator 2 Extension
pdf_generator_2_extension
3 CVEs
Sr Feuser Register Extension
sr_feuser_register_extension
2 CVEs
Air Filemanager
air_filemanager
2 CVEs
Wt Gallery
wt_gallery
2 CVEs
Address Directory
address_directory
2 CVEs
Sql Frontend Extension
sql_frontend_extension
2 CVEs
Commerce Extension
commerce_extension
2 CVEs
Eluna Page Comments Extension
eluna_page_comments_extension
2 CVEs
Wir Ber Uns Extension
wir_ber_uns_extension
2 CVEs
Ws Ecard
ws_ecard
2 CVEs
Toi Category
toi_category
2 CVEs
Terminal
terminal
2 CVEs
Beuserswitch
beuserswitch
2 CVEs
Pharstreamwrapper
pharstreamwrapper
2 CVEs
Sg Zfelib
sg_zfelib
1 CVE
Kj Imagelightbox2
kj_imagelightbox2
1 CVE
Rlmp Eventdb
rlmp_eventdb
1 CVE
Send A Card
send_a_card
1 CVE
Phpmyadmin
phpmyadmin
1 CVE
News Calendar Extension
news_calendar_extension
1 CVE
Industry Database
industry_database
1 CVE
Packman Extension
packman_extension
1 CVE
Kb Unpack Extension
kb_unpack_extension
1 CVE
Pinboard Extension
pinboard_extension
1 CVE
Branchenbuch Extension
branchenbuch_extension
1 CVE
Support View Extension
support_view_extension
1 CVE
Codeon Petition Extension
codeon_petition_extension
1 CVE
Secure Directory
secure_directory
1 CVE
Simplesurvey
simplesurvey
1 CVE
Frontend Users View
frontend_users_view
1 CVE
Econda Plugin
econda_plugin
1 CVE
Jobcontrol
jobcontrol
1 CVE
Mannschaftsliste
mannschaftsliste
1 CVE
M1 Intern
m1_intern
1 CVE
Page Improvements
page_improvements
1 CVE
Another Backend Login
another_backend_login
1 CVE
File List Extension
file_list_extension
1 CVE
Advcalendar Extension
advcalendar_extension
1 CVE
Cms Poll System Extension
cms_poll_system_extension
1 CVE
Fsmi People
fsmi_people
1 CVE
Dictionary Extension
dictionary_extension
1 CVE
Freecap Captcha Extension
freecap_captcha_extension
1 CVE
Sb Universal Plugin
sb_universal_plugin
1 CVE
Tu Clausthal Odin
tu-clausthal_odin
1 CVE
Tu Clausthal Staff
tu-clausthal_staff
1 CVE
Autobeuser
autobeuser
1 CVE
Pmk Rssnewsexport Extension
pmk_rssnewsexport_extension
1 CVE
Nd Antispam
nd_antispam
1 CVE
Tjs Reslib
tjs_reslib
1 CVE
Xds Staff
xds_staff
1 CVE
Kiddog Mysqldumper
kiddog_mysqldumper
1 CVE
Dl3 Tt News Alerts
dl3_tt_news_alerts
1 CVE
Ttpedit
ttpedit
1 CVE
Vm19 Userlinks
vm19_userlinks
1 CVE
Mjseventpro
mjseventpro
1 CVE
Bb Simplejobs
bb_simplejobs
1 CVE
Job Reports
job_reports
1 CVE
Pb Clanlist
pb_clanlist
1 CVE
Zak Store Management
zak_store_management
1 CVE
Majordomo
majordomo
1 CVE
Mimi Tipfriends
mimi_tipfriends
1 CVE
Vd Gemomap
vd_gemomap
1 CVE
Ws Gallery
ws_gallery
1 CVE
Brainstorming
brainstorming
1 CVE
Sbanner
sbanner
1 CVE
Mm Whtppr
mm_whtppr
1 CVE
Skt Eurocalc
skt_eurocalc
1 CVE
Aeurltool
aeurltool
1 CVE
Flow
flow
1 CVE
Neos
neos
1 CVE
Svg Sanitizer
svg_sanitizer
1 CVE
Mediace
mediace
1 CVE
Fluid Engine
fluid_engine
1 CVE
Fluid
fluid
1 CVE

CVEs (315)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2010-0344
1Typo3
1Zak Store Management
Apr 23, 2026
Jan 15, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the zak_store_management extension 1.0.0 and earlier TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2010-0343
1Typo3
1Pb Clanlist
Apr 23, 2026
Jan 15, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the Clan Users List (pb_clanlist) extension 0.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2010-0342
1Typo3
1Job Reports
Apr 23, 2026
Jan 15, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the Reports for Job (job_reports) extension 0.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2010-0341
1Typo3
1Bb Simplejobs
Apr 23, 2026
Jan 15, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the BB Simple Jobs (bb_simplejobs) extension 0.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2010-0340
1Typo3
1Mjseventpro
Apr 23, 2026
Jan 15, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the MJS Event Pro (mjseventpro) extension 0.2.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2010-0339
1Typo3
1Vm19 Userlinks
Apr 23, 2026
Jan 15, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the User Links (vm19_userlinks) extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2010-0338
1Typo3
1Ttpedit
Apr 23, 2026
Jan 15, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the TT_Products editor (ttpedit) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2010-0337
1Typo3
1Dl3 Tt News Alerts
Apr 23, 2026
Jan 15, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the tt_news Mail alert (dl3_tt_news_alerts) extension 0.2.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2010-0336
1Typo3
1Kiddog Mysqldumper
Apr 23, 2026
Jan 15, 2010
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in the kiddog_mysqldumper (kiddog_mysqldumper) extension 0.0.3 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown attack vectors.
CVE-2009-4392
1Typo3
1Xds Staff
Apr 23, 2026
Dec 22, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the XDS Staff List (xds_staff) extension 0.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2009-3636
1Typo3
1Typo3
Apr 23, 2026
Nov 2, 2009
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to inject arbitrary web s...Show more
Cross-site scripting (XSS) vulnerability in the Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.Show less
CVE-2009-3635
1Typo3
1Typo3
Apr 23, 2026
Nov 2, 2009
N/A· v4
N/A· v3
6.8 MEDIUM· v2
The Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to gain access by using only the password's md5 hash as a credential.
CVE-2009-3634
1Typo3
1Typo3
Apr 23, 2026
Nov 2, 2009
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the Frontend Login Box (aka felogin) subcomponent in TYPO3 4.2.0 through 4.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
CVE-2009-3633
1Typo3
1Typo3
Apr 23, 2026
Nov 2, 2009
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the t3lib_div::quoteJSvalue API function in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to inject arbi...Show more
Cross-site scripting (XSS) vulnerability in the t3lib_div::quoteJSvalue API function in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the sanitizing algorithm.Show less
CVE-2009-3632
1Typo3
1Typo3
Apr 23, 2026
Nov 2, 2009
N/A· v4
N/A· v3
6.5 MEDIUM· v2
SQL injection vulnerability in the traditional frontend editing feature in the Frontend Editing subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote...Show more
SQL injection vulnerability in the traditional frontend editing feature in the Frontend Editing subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to execute arbitrary SQL commands via unspecified parameters.Show less
CVE-2009-3631
1Typo3
1Typo3
Apr 23, 2026
Nov 2, 2009
N/A· v4
N/A· v3
8.5 HIGH· v2
The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2, when the DAM extension or ftp upload is enabled, allows remote authenticated users to execute arb...Show more
The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2, when the DAM extension or ftp upload is enabled, allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filename.Show less
CVE-2009-3630
1Typo3
1Typo3
Apr 23, 2026
Nov 2, 2009
N/A· v4
N/A· v3
5.5 MEDIUM· v2
The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to place arbitrary web sites in TYPO3 backend framesets via craf...Show more
The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to place arbitrary web sites in TYPO3 backend framesets via crafted parameters, related to a "frame hijacking" issue.Show less
CVE-2009-3629
1Typo3
1Typo3
Apr 23, 2026
Nov 2, 2009
N/A· v4
N/A· v3
3.5 LOW· v2
Multiple cross-site scripting (XSS) vulnerabilities in the Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allow remote authenticated users to inject...Show more
Multiple cross-site scripting (XSS) vulnerabilities in the Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.Show less
CVE-2009-3628
1Typo3
1Typo3
Apr 23, 2026
Nov 2, 2009
N/A· v4
N/A· v3
4.0 MEDIUM· v2
The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to determine an encryption key via crafted input to a tt_content...Show more
The Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to determine an encryption key via crafted input to a tt_content form element.Show less
CVE-2008-6699
1Typo3
2Tjs Reslib
Typo3
Apr 23, 2026
Apr 10, 2009
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in Resource Library (tjs_reslib) 0.1.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.