Typo3

Typo3

219 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2012-6144

  • EPSS 0.6%
  • Veröffentlicht 01.07.2013 21:55:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

SQL injection vulnerability in the Backend History module in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 allows remote authenticated backend users to execute arbitrary SQL commands via unspecified vectors.

3.5

CVE-2012-6145

  • EPSS 0.2%
  • Veröffentlicht 01.07.2013 21:55:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Cross-site scripting (XSS) vulnerability in the Backend History module in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 allows remote authenticated backend users to inject arbitrary web script or HTML via unspecified vectors.

3.5

CVE-2012-6147

  • EPSS 0.2%
  • Veröffentlicht 01.07.2013 21:55:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Cross-site scripting (XSS) vulnerability in the tree render API (TCA-Tree) in the Backend API in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 allows remote authenticated backend users to inject arbitrary web script or HTML v...

3.5

CVE-2012-6148

  • EPSS 0.22%
  • Veröffentlicht 01.07.2013 21:55:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Cross-site scripting (XSS) vulnerability in the function menu API in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 allows remote authenticated backend users to inject arbitrary web script or HTML via unspecified vectors.

6.4

CVE-2013-1843

  • EPSS 0.63%
  • Veröffentlicht 20.03.2013 15:55:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Open redirect vulnerability in the Access tracking mechanism in TYPO3 4.5.x before 4.5.24, 4.6.x before 4.6.17, 4.7.x before 4.7.9, and 6.0.x before 6.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks v...

7.5

CVE-2013-1842

  • EPSS 3.33%
  • Veröffentlicht 20.03.2013 15:55:00
  • Zuletzt bearbeitet 29.04.2026 01:13:23

SQL injection vulnerability in the Extbase Framework in TYPO3 4.5.x before 4.5.24, 4.6.x before 4.6.17, 4.7.x before 4.7.9, and 6.0.x before 6.0.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to "the Quer...

3.5

CVE-2012-3529

  • EPSS 0.37%
  • Veröffentlicht 05.09.2012 23:55:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The configuration module in the backend in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote authenticated backend users to obtain the encryption key via unspecified vectors.

4.3

CVE-2012-3530

  • EPSS 0.57%
  • Veröffentlicht 05.09.2012 23:55:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Incomplete blacklist vulnerability in the t3lib_div::quoteJSvalue API function in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote attackers to conduct cross-site scripting (XSS) attacks via certain HTML5 JavaScript...

4.3

CVE-2012-3531

  • EPSS 0.25%
  • Veröffentlicht 05.09.2012 23:55:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Cross-site scripting (XSS) vulnerability in the Install Tool in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.6

CVE-2012-3527

  • EPSS 2.07%
  • Veröffentlicht 05.09.2012 23:55:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

view_help.php in the backend help system in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote authenticated backend users to unserialize arbitrary objects and possibly execute arbitrary PHP code via an unspecified pa...