← Back

Typo3

typo3

315 CVEs • 78 products

Products (78)

Click to collapse
Toggle
Typo3
typo3
218 CVEs
Wec Discussion Forum
wec_discussion_forum
4 CVEs
Dam Frontend Extension
dam_frontend_extension
4 CVEs
Html Sanitizer
html_sanitizer
4 CVEs
Pdf Generator 2 Extension
pdf_generator_2_extension
3 CVEs
Sr Feuser Register Extension
sr_feuser_register_extension
2 CVEs
Air Filemanager
air_filemanager
2 CVEs
Wt Gallery
wt_gallery
2 CVEs
Address Directory
address_directory
2 CVEs
Sql Frontend Extension
sql_frontend_extension
2 CVEs
Commerce Extension
commerce_extension
2 CVEs
Eluna Page Comments Extension
eluna_page_comments_extension
2 CVEs
Wir Ber Uns Extension
wir_ber_uns_extension
2 CVEs
Ws Ecard
ws_ecard
2 CVEs
Toi Category
toi_category
2 CVEs
Terminal
terminal
2 CVEs
Beuserswitch
beuserswitch
2 CVEs
Pharstreamwrapper
pharstreamwrapper
2 CVEs
Sg Zfelib
sg_zfelib
1 CVE
Kj Imagelightbox2
kj_imagelightbox2
1 CVE
Rlmp Eventdb
rlmp_eventdb
1 CVE
Send A Card
send_a_card
1 CVE
Phpmyadmin
phpmyadmin
1 CVE
News Calendar Extension
news_calendar_extension
1 CVE
Industry Database
industry_database
1 CVE
Packman Extension
packman_extension
1 CVE
Kb Unpack Extension
kb_unpack_extension
1 CVE
Pinboard Extension
pinboard_extension
1 CVE
Branchenbuch Extension
branchenbuch_extension
1 CVE
Support View Extension
support_view_extension
1 CVE
Codeon Petition Extension
codeon_petition_extension
1 CVE
Secure Directory
secure_directory
1 CVE
Simplesurvey
simplesurvey
1 CVE
Frontend Users View
frontend_users_view
1 CVE
Econda Plugin
econda_plugin
1 CVE
Jobcontrol
jobcontrol
1 CVE
Mannschaftsliste
mannschaftsliste
1 CVE
M1 Intern
m1_intern
1 CVE
Page Improvements
page_improvements
1 CVE
Another Backend Login
another_backend_login
1 CVE
File List Extension
file_list_extension
1 CVE
Advcalendar Extension
advcalendar_extension
1 CVE
Cms Poll System Extension
cms_poll_system_extension
1 CVE
Fsmi People
fsmi_people
1 CVE
Dictionary Extension
dictionary_extension
1 CVE
Freecap Captcha Extension
freecap_captcha_extension
1 CVE
Sb Universal Plugin
sb_universal_plugin
1 CVE
Tu Clausthal Odin
tu-clausthal_odin
1 CVE
Tu Clausthal Staff
tu-clausthal_staff
1 CVE
Autobeuser
autobeuser
1 CVE
Pmk Rssnewsexport Extension
pmk_rssnewsexport_extension
1 CVE
Nd Antispam
nd_antispam
1 CVE
Tjs Reslib
tjs_reslib
1 CVE
Xds Staff
xds_staff
1 CVE
Kiddog Mysqldumper
kiddog_mysqldumper
1 CVE
Dl3 Tt News Alerts
dl3_tt_news_alerts
1 CVE
Ttpedit
ttpedit
1 CVE
Vm19 Userlinks
vm19_userlinks
1 CVE
Mjseventpro
mjseventpro
1 CVE
Bb Simplejobs
bb_simplejobs
1 CVE
Job Reports
job_reports
1 CVE
Pb Clanlist
pb_clanlist
1 CVE
Zak Store Management
zak_store_management
1 CVE
Majordomo
majordomo
1 CVE
Mimi Tipfriends
mimi_tipfriends
1 CVE
Vd Gemomap
vd_gemomap
1 CVE
Ws Gallery
ws_gallery
1 CVE
Brainstorming
brainstorming
1 CVE
Sbanner
sbanner
1 CVE
Mm Whtppr
mm_whtppr
1 CVE
Skt Eurocalc
skt_eurocalc
1 CVE
Aeurltool
aeurltool
1 CVE
Flow
flow
1 CVE
Neos
neos
1 CVE
Svg Sanitizer
svg_sanitizer
1 CVE
Mediace
mediace
1 CVE
Fluid Engine
fluid_engine
1 CVE
Fluid
fluid
1 CVE

CVEs (315)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-2717
2Apache
Typo3
2Apache Webserver
Typo3
Apr 23, 2026
Jun 16, 2008
N/A· v4
N/A· v3
6.5 MEDIUM· v2
TYPO3 4.0.x before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.2.1, uses an insufficiently restrictive default fileDenyPattern for Apache, which allows remote attackers to bypass security restrictions and upload config...Show more
TYPO3 4.0.x before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.2.1, uses an insufficiently restrictive default fileDenyPattern for Apache, which allows remote attackers to bypass security restrictions and upload configuration files such as .htaccess, or conduct file upload attacks using multiple extensions.Show less
CVE-2008-2526
1Typo3
1Wt Gallery
Apr 23, 2026
Jun 3, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the WT Gallery (aka wt_gallery) extension 2.6.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2008-2525
1Typo3
1Rlmp Eventdb
Apr 23, 2026
Jun 3, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the Event Database (aka rlmp_eventdb) extension before 1.1.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2008-2490
1Typo3
1Kj Imagelightbox2
Apr 23, 2026
May 28, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the KJ Image Lightbox 2 (aka kj_imagelightbox2) extension 1.4.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified "user input...Show more
Cross-site scripting (XSS) vulnerability in the KJ Image Lightbox 2 (aka kj_imagelightbox2) extension 1.4.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified "user input."Show less
CVE-2008-2489
1Typo3
1Sg Zfelib
Apr 23, 2026
May 28, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the Library for Frontend Plugins (aka sg_zfelib) extension 1.1.512 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified "user input."
CVE-2008-2345
1Typo3
1Air Filemanager
Apr 23, 2026
May 19, 2008
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the air_filemanager 0.6.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary PHP code via unspecified vectors related to "insufficient file filtering."
CVE-2008-2344
1Typo3
1Air Filemanager
Apr 23, 2026
May 19, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the air_filemanager 0.6.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2008-2275
1Typo3
1Sr Feuser Register Extension
Apr 23, 2026
May 16, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
Unspecified vulnerability in sr_feuser_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9 extension for TYPO3 allows remote attackers to execute arbitrary code and delete arbitrary files via...Show more
Unspecified vulnerability in sr_feuser_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9 extension for TYPO3 allows remote attackers to execute arbitrary code and delete arbitrary files via unspecified attack vectors.Show less
CVE-2008-2274
1Typo3
1Sr Feuser Register Extension
Apr 23, 2026
May 16, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the sr_feuser_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9 extension for TYPO3 allows remote attackers to inject arbitrary web script or HTM...Show more
Cross-site scripting (XSS) vulnerability in the sr_feuser_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9 extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.Show less
CVE-2007-6381
1Typo3
1Typo3
Apr 23, 2026
Dec 15, 2007
N/A· v4
N/A· v3
6.5 MEDIUM· v2
SQL injection vulnerability in the indexed_search system extension in TYPO3 3.x, 4.0 through 4.0.7, and 4.1 through 4.1.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
CVE-2007-1081
1Typo3
1Typo3
Apr 23, 2026
Feb 22, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
The start function in class.t3lib_formmail.php in TYPO3 before 4.0.5, 4.1beta, and 4.1RC1 allows attackers to inject arbitrary email headers via unknown vectors. NOTE: some details were obtained from third party informa...Show more
The start function in class.t3lib_formmail.php in TYPO3 before 4.0.5, 4.1beta, and 4.1RC1 allows attackers to inject arbitrary email headers via unknown vectors. NOTE: some details were obtained from third party information.Show less
CVE-2006-6690
1Typo3
1Typo3
Apr 23, 2026
Dec 21, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
rtehtmlarea/pi1/class.tx_rtehtmlarea_pi1.php in Typo3 4.0.0 through 4.0.3, 3.7 and 3.8 with the rtehtmlarea extension, and 4.1 beta allows remote authenticated users to execute arbitrary commands via shell metacharacters...Show more
rtehtmlarea/pi1/class.tx_rtehtmlarea_pi1.php in Typo3 4.0.0 through 4.0.3, 3.7 and 3.8 with the rtehtmlarea extension, and 4.1 beta allows remote authenticated users to execute arbitrary commands via shell metacharacters in the userUid parameter to rtehtmlarea/htmlarea/plugins/SpellChecker/spell-check-logic.php, and possibly another vector.Show less
CVE-2006-5069
1Typo3
1Typo3
Apr 23, 2026
Sep 28, 2006
N/A· v4
N/A· v3
2.6 LOW· v2
Cross-site scripting (XSS) vulnerability in class.tx_indexedsearch.php in the Indexed Search 2.9.0 extension for Typo3 before 4.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the searc...Show more
Cross-site scripting (XSS) vulnerability in class.tx_indexedsearch.php in the Indexed Search 2.9.0 extension for Typo3 before 4.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter.Show less
CVE-2006-0327
1Typo3
1Typo3
Apr 16, 2026
Jan 21, 2006
N/A· v4
N/A· v3
5.0 MEDIUM· v2
TYPO3 3.7.1 allows remote attackers to obtain sensitive information via a direct request to (1) thumbs.php, (2) showpic.php, or (3) tables.php, which causes them to incorrectly define a variable and reveal the path in an...Show more
TYPO3 3.7.1 allows remote attackers to obtain sensitive information via a direct request to (1) thumbs.php, (2) showpic.php, or (3) tables.php, which causes them to incorrectly define a variable and reveal the path in an error message when a require function call fails.Show less
CVE-2005-4875
1Typo3
1Typo3
Apr 16, 2026
Dec 31, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
TYPO3 3.8.0 and earlier allows remote attackers to obtain sensitive information via a direct request to misc/phpcheck/, which invokes the phpinfo function and prints values of unspecified environment variables.