← Back

Typo3

typo3

315 CVEs • 78 products

Products (78)

Click to collapse
Toggle
Typo3
typo3
218 CVEs
Wec Discussion Forum
wec_discussion_forum
4 CVEs
Dam Frontend Extension
dam_frontend_extension
4 CVEs
Html Sanitizer
html_sanitizer
4 CVEs
Pdf Generator 2 Extension
pdf_generator_2_extension
3 CVEs
Sr Feuser Register Extension
sr_feuser_register_extension
2 CVEs
Air Filemanager
air_filemanager
2 CVEs
Wt Gallery
wt_gallery
2 CVEs
Address Directory
address_directory
2 CVEs
Sql Frontend Extension
sql_frontend_extension
2 CVEs
Commerce Extension
commerce_extension
2 CVEs
Eluna Page Comments Extension
eluna_page_comments_extension
2 CVEs
Wir Ber Uns Extension
wir_ber_uns_extension
2 CVEs
Ws Ecard
ws_ecard
2 CVEs
Toi Category
toi_category
2 CVEs
Terminal
terminal
2 CVEs
Beuserswitch
beuserswitch
2 CVEs
Pharstreamwrapper
pharstreamwrapper
2 CVEs
Sg Zfelib
sg_zfelib
1 CVE
Kj Imagelightbox2
kj_imagelightbox2
1 CVE
Rlmp Eventdb
rlmp_eventdb
1 CVE
Send A Card
send_a_card
1 CVE
Phpmyadmin
phpmyadmin
1 CVE
News Calendar Extension
news_calendar_extension
1 CVE
Industry Database
industry_database
1 CVE
Packman Extension
packman_extension
1 CVE
Kb Unpack Extension
kb_unpack_extension
1 CVE
Pinboard Extension
pinboard_extension
1 CVE
Branchenbuch Extension
branchenbuch_extension
1 CVE
Support View Extension
support_view_extension
1 CVE
Codeon Petition Extension
codeon_petition_extension
1 CVE
Secure Directory
secure_directory
1 CVE
Simplesurvey
simplesurvey
1 CVE
Frontend Users View
frontend_users_view
1 CVE
Econda Plugin
econda_plugin
1 CVE
Jobcontrol
jobcontrol
1 CVE
Mannschaftsliste
mannschaftsliste
1 CVE
M1 Intern
m1_intern
1 CVE
Page Improvements
page_improvements
1 CVE
Another Backend Login
another_backend_login
1 CVE
File List Extension
file_list_extension
1 CVE
Advcalendar Extension
advcalendar_extension
1 CVE
Cms Poll System Extension
cms_poll_system_extension
1 CVE
Fsmi People
fsmi_people
1 CVE
Dictionary Extension
dictionary_extension
1 CVE
Freecap Captcha Extension
freecap_captcha_extension
1 CVE
Sb Universal Plugin
sb_universal_plugin
1 CVE
Tu Clausthal Odin
tu-clausthal_odin
1 CVE
Tu Clausthal Staff
tu-clausthal_staff
1 CVE
Autobeuser
autobeuser
1 CVE
Pmk Rssnewsexport Extension
pmk_rssnewsexport_extension
1 CVE
Nd Antispam
nd_antispam
1 CVE
Tjs Reslib
tjs_reslib
1 CVE
Xds Staff
xds_staff
1 CVE
Kiddog Mysqldumper
kiddog_mysqldumper
1 CVE
Dl3 Tt News Alerts
dl3_tt_news_alerts
1 CVE
Ttpedit
ttpedit
1 CVE
Vm19 Userlinks
vm19_userlinks
1 CVE
Mjseventpro
mjseventpro
1 CVE
Bb Simplejobs
bb_simplejobs
1 CVE
Job Reports
job_reports
1 CVE
Pb Clanlist
pb_clanlist
1 CVE
Zak Store Management
zak_store_management
1 CVE
Majordomo
majordomo
1 CVE
Mimi Tipfriends
mimi_tipfriends
1 CVE
Vd Gemomap
vd_gemomap
1 CVE
Ws Gallery
ws_gallery
1 CVE
Brainstorming
brainstorming
1 CVE
Sbanner
sbanner
1 CVE
Mm Whtppr
mm_whtppr
1 CVE
Skt Eurocalc
skt_eurocalc
1 CVE
Aeurltool
aeurltool
1 CVE
Flow
flow
1 CVE
Neos
neos
1 CVE
Svg Sanitizer
svg_sanitizer
1 CVE
Mediace
mediace
1 CVE
Fluid Engine
fluid_engine
1 CVE
Fluid
fluid
1 CVE

CVEs (315)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-5797
1Typo3
1Advcalendar Extension
Apr 23, 2026
Dec 31, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the advCalendar extension 0.3.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2008-5796
1Typo3
1Eluna Page Comments Extension
Apr 23, 2026
Dec 31, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the eluna Page Comments (eluna_pagecomments) extension 1.1.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2008-5795
1Typo3
1Eluna Page Comments Extension
Apr 23, 2026
Dec 31, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the eluna Page Comments (eluna_pagecomments) extension 1.1.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2008-5656
1Typo3
1Typo3
Apr 23, 2026
Dec 17, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the frontend plugin for the felogin system extension in TYPO3 4.2.0, 4.2.1 and 4.2.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVE-2008-5644
1Typo3
1Typo3
Apr 23, 2026
Dec 17, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the file backend module in TYPO3 4.2.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVE-2008-5609
1Typo3
1Commerce Extension
Apr 23, 2026
Dec 17, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the Commerce extension 0.9.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2008-5096
1Typo3
1File List Extension
Apr 23, 2026
Nov 14, 2008
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in the TYPO3 File List (file_list) extension 0.2.1 and earlier allows remote attackers to obtain sensitive information via unknown attack vectors.
CVE-2008-5087
1Typo3
1Another Backend Login
Apr 23, 2026
Nov 14, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in TYPO3 Another Backend Login (wrg_anotherbelogin) extension before 0.0.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2008-4661
1Typo3
1Page Improvements
Apr 23, 2026
Oct 22, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the Page Improvements (sm_pageimprovements) 1.1.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2008-4660
1Typo3
1M1 Intern
Apr 23, 2026
Oct 22, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the M1 Intern (m1_intern) 1.0.0 extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2008-4659
1Typo3
1Mannschaftsliste
Apr 23, 2026
Oct 22, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the Mannschaftsliste (kiddog_playerlist) 1.0.3 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2008-4658
1Typo3
1Jobcontrol
Apr 23, 2026
Oct 22, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the JobControl (dmmjobcontrol) 1.15.4 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2008-4657
1Typo3
1Econda Plugin
Apr 23, 2026
Oct 22, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the Econda Plugin (econda) 0.0.2 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2008-4656
1Typo3
1Frontend Users View
Apr 23, 2026
Oct 22, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the Frontend Users View (feusersview) 0.1.6 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2008-4655
1Typo3
1Simplesurvey
Apr 23, 2026
Oct 22, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the Simple survey (simplesurvey) 1.7.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2008-4188
1Typo3
1Secure Directory
Apr 23, 2026
Sep 23, 2008
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the TYPO3 Secure Directory (kw_secdir) extension before 1.0.2 allows remote attackers to execute arbitrary code via unknown vectors related to "injection of control characters."
CVE-2008-3056
1Typo3
1Codeon Petition Extension
Apr 23, 2026
Jul 7, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the Codeon Petition (cd_petition) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2008-3055
1Typo3
1Support View Extension
Apr 23, 2026
Jul 7, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the Support view (ext_tbl) extension 0.0.102 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2008-3054
1Typo3
1Branchenbuch Extension
Apr 23, 2026
Jul 7, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the Branchenbuch (aka Yellow Pages o (mh_branchenbuch) extension 0.8.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2008-3053
1Typo3
1Sql Frontend Extension
Apr 23, 2026
Jul 7, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the SQL Frontend (mh_omsqlio) extension 1.0.11 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.