Typo3

Typo3

219 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
3.5

CVE-2012-3528

  • EPSS 0.52%
  • Veröffentlicht 05.09.2012 23:55:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Multiple cross-site scripting (XSS) vulnerabilities in the backend in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allow remote authenticated backend users to inject arbitrary web script or HTML via unspecified vectors.

5

CVE-2012-1605

  • EPSS 0.94%
  • Veröffentlicht 04.09.2012 20:55:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The Extbase Framework in TYPO3 4.6.x through 4.6.6, 4.7, and 6.0 unserializes untrusted data, which allows remote attackers to unserialize arbitrary objects and possibly execute arbitrary code via vectors related to "a missing signature (HMAC) for a ...

3.5

CVE-2012-1606

  • EPSS 0.29%
  • Veröffentlicht 04.09.2012 20:55:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Multiple cross-site scripting (XSS) vulnerabilities in the Backend component in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allow remote authenticated backend users to inject arbitrary web script or HTML via un...

5

CVE-2012-1607

  • EPSS 0.7%
  • Veröffentlicht 04.09.2012 20:55:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The Command Line Interface (CLI) script in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to obtain the database name via a direct request.

5

CVE-2012-1608

  • EPSS 0.68%
  • Veröffentlicht 04.09.2012 20:55:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The t3lib_div::RemoveXSS API method in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to bypass the cross-site scripting (XSS) protection mechanism and inject arbitrary web script or HTML v...

4.3

CVE-2012-2112

  • EPSS 0.5%
  • Veröffentlicht 27.08.2012 21:55:01
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Cross-site scripting (XSS) vulnerability in the Exception Handler in TYPO3 4.4.x before 4.4.15, 4.5.x before 4.5.15, 4.6.x before 4.6.8, and 4.7 allows remote attackers to inject arbitrary web script or HTML via exception messages.

6.8

CVE-2010-5099

Exploit
  • EPSS 5.25%
  • Veröffentlicht 30.05.2012 20:55:02
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The fileDenyPattern functionality in the PHP file inclusion protection API in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 does not properly filter file types, which allows remote attackers to bypass intended access restricti...

5

CVE-2010-5102

  • EPSS 0.61%
  • Veröffentlicht 21.05.2012 20:55:17
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Directory traversal vulnerability in mod/tools/em/class.em_unzip.php in the unzip library in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote attackers to write arbitrary files via unspecified vectors.

6

CVE-2010-5103

  • EPSS 0.65%
  • Veröffentlicht 21.05.2012 20:55:17
  • Zuletzt bearbeitet 29.04.2026 01:13:23

SQL injection vulnerability in the list module in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors.

4.3

CVE-2010-5104

  • EPSS 0.77%
  • Veröffentlicht 21.05.2012 20:55:17
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The escapeStrForLike method in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 does not properly escape input when the MySQL database is set to sql_mode NO_BACKSLASH_ESCAPES, which allows remote attackers to obtain sensitive inf...