Vulnerabilities (CVE)

Filtered by vendor Typo3 Subscribe
Total 482 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-4656 1 Typo3 2 Frontend Users View, Typo3 2024-11-21 7.5 HIGH N/A
SQL injection vulnerability in the Frontend Users View (feusersview) 0.1.6 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2008-4655 1 Typo3 2 Simplesurvey, Typo3 2024-11-21 7.5 HIGH N/A
SQL injection vulnerability in the Simple survey (simplesurvey) 1.7.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2008-4188 1 Typo3 1 Secure Directory 2024-11-21 10.0 HIGH N/A
Unspecified vulnerability in the TYPO3 Secure Directory (kw_secdir) extension before 1.0.2 allows remote attackers to execute arbitrary code via unknown vectors related to "injection of control characters."
CVE-2008-3056 1 Typo3 1 Codeon Petition Extension 2024-11-21 7.5 HIGH N/A
SQL injection vulnerability in the Codeon Petition (cd_petition) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2008-3055 1 Typo3 1 Support View Extension 2024-11-21 7.5 HIGH N/A
SQL injection vulnerability in the Support view (ext_tbl) extension 0.0.102 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2008-3054 1 Typo3 1 Branchenbuch Extension 2024-11-21 7.5 HIGH N/A
SQL injection vulnerability in the Branchenbuch (aka Yellow Pages o (mh_branchenbuch) extension 0.8.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2008-3053 1 Typo3 1 Sql Frontend Extension 2024-11-21 7.5 HIGH N/A
SQL injection vulnerability in the SQL Frontend (mh_omsqlio) extension 1.0.11 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2008-3052 1 Typo3 1 Sql Frontend Extension 2024-11-21 7.5 HIGH N/A
Unspecified vulnerability in the SQL Frontend (mh_omsqlio) extension 1.0.11 and earlier for TYPO3 allows remote attackers to cause a denial of service via unknown vectors.
CVE-2008-3051 1 Typo3 1 Pinboard Extension 2024-11-21 7.5 HIGH N/A
SQL injection vulnerability in the Pinboard extension 0.0.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2008-3050 1 Typo3 1 Pdf Generator 2 Extension 2024-11-21 5.0 MEDIUM N/A
Unspecified vulnerability in the PDF Generator 2 (pdf_generator2) extension 0.5.0 and earlier for TYPO3 allows attackers to cause a denial of service via unspecified vectors.
CVE-2008-3049 1 Typo3 1 Pdf Generator 2 Extension 2024-11-21 5.0 MEDIUM N/A
The PDF Generator 2 (pdf_generator2) extension 0.5.0 and earlier for TYPO3 allows attackers to obtain sensitive information via unspecified vectors.
CVE-2008-3048 1 Typo3 1 Pdf Generator 2 Extension 2024-11-21 7.5 HIGH N/A
Unspecified vulnerability in the PDF Generator 2 (pdf_generator2) extension 0.5.0 and earlier for TYPO3 has unknown impact and attack vectors related to "Unprotected test functionality."
CVE-2008-3047 1 Typo3 1 Kb Unpack Extension 2024-11-21 7.5 HIGH N/A
Incomplete blacklist vulnerability in the KB Unpack (kb_unpack) extension 0.1.0 and earlier for TYPO3 has unknown impact and attack vectors.
CVE-2008-3046 1 Typo3 1 Packman Extension 2024-11-21 7.5 HIGH N/A
Incomplete blacklist vulnerability in the Packman (kb_packman) extension 0.2.1 and earlier for TYPO3 has unknown impact and attack vectors.
CVE-2008-3045 1 Typo3 1 Industry Database 2024-11-21 7.5 HIGH N/A
Unspecified vulnerability in the Industry Database (aka Branchendatenbank pro_industrydb) extension 1.0.0 and earlier for TYPO3 has unknown impact and attack vectors related to "Insufficient Verification of Data Authenticity."
CVE-2008-3044 1 Typo3 1 News Calendar Extension 2024-11-21 7.5 HIGH N/A
SQL injection vulnerability in the News Calendar (newscalendar) extension 1.0.7 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2008-3043 1 Typo3 1 Wec Discussion Forum 2024-11-21 7.5 HIGH N/A
Unspecified vulnerability in the WEC Discussion Forum (wec_discussion) extension 1.6.2 and earlier for TYPO3 allows attackers to execute arbitrary code via vectors related to "certain file types."
CVE-2008-3042 1 Typo3 1 Dam Frontend Extension 2024-11-21 10.0 HIGH N/A
Unspecified vulnerability in the DAM Frontend (dam_frontend) extension 0.1.0 and earlier for TYPO3 has unknown impact and attack vectors related to "Improper Error Handling."
CVE-2008-3041 1 Typo3 1 Dam Frontend Extension 2024-11-21 7.5 HIGH N/A
Unspecified vulnerability in the DAM Frontend (dam_frontend) extension 0.1.0 and earlier for TYPO3 has unknown impact and attack vectors related to "broken access control."
CVE-2008-3040 1 Typo3 1 Dam Frontend Extension 2024-11-21 5.0 MEDIUM N/A
Unspecified vulnerability in the DAM Frontend (dam_frontend) extension 0.1.0 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors.