Typo3

Typo3

222 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2010-5102

  • EPSS 2.63%
  • Veröffentlicht 21.05.2012 20:55:17
  • Zuletzt bearbeitet 16.06.2026 23:26:08

Directory traversal vulnerability in mod/tools/em/class.em_unzip.php in the unzip library in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote attackers to write arbitrary files via unspecified vectors.

6

CVE-2010-5103

  • EPSS 1.32%
  • Veröffentlicht 21.05.2012 20:55:17
  • Zuletzt bearbeitet 16.06.2026 23:26:08

SQL injection vulnerability in the list module in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors.

4.3

CVE-2010-5104

  • EPSS 1.67%
  • Veröffentlicht 21.05.2012 20:55:17
  • Zuletzt bearbeitet 16.06.2026 23:26:08

The escapeStrForLike method in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 does not properly escape input when the MySQL database is set to sql_mode NO_BACKSLASH_ESCAPES, which allows remote attackers to obtain sensitive inf...

2.6

CVE-2010-5097

  • EPSS 1.63%
  • Veröffentlicht 21.05.2012 20:55:16
  • Zuletzt bearbeitet 16.06.2026 23:26:07

Cross-site scripting (XSS) vulnerability in the click enlarge functionality in TYPO3 4.3.x before 4.3.9 and 4.4.x before 4.4.5 when the caching framework is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vecto...

3.5

CVE-2010-5098

  • EPSS 1.85%
  • Veröffentlicht 21.05.2012 20:55:16
  • Zuletzt bearbeitet 16.06.2026 23:26:08

Cross-site scripting (XSS) vulnerability in the FORM content object in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

3.5

CVE-2010-5100

  • EPSS 1.12%
  • Veröffentlicht 21.05.2012 20:55:16
  • Zuletzt bearbeitet 16.06.2026 23:26:08

Multiple cross-site scripting (XSS) vulnerabilities in the Install Tool in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

4

CVE-2010-5101

  • EPSS 1.95%
  • Veröffentlicht 21.05.2012 20:55:16
  • Zuletzt bearbeitet 16.06.2026 23:26:08

Directory traversal vulnerability in the TypoScript setup in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote authenticated administrators to read arbitrary files via unspecified vectors related to the "file inclusi...

6.8

CVE-2011-4614

  • EPSS 5.63%
  • Veröffentlicht 18.02.2012 00:55:02
  • Zuletzt bearbeitet 16.06.2026 23:35:08

PHP remote file inclusion vulnerability in Classes/Controller/AbstractController.php in the workspaces system extension in TYPO3 4.5.x before 4.5.9, 4.6.x before 4.6.2, and development versions of 4.7 allows remote attackers to execute arbitrary PHP ...

7.1

CVE-2010-3714

  • EPSS 24.56%
  • Veröffentlicht 25.10.2010 20:01:04
  • Zuletzt bearbeitet 16.06.2026 23:23:23

The jumpUrl (aka access tracking) implementation in tslib/class.tslib_fe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 does not properly compare certain hash values during access-control decisions, which allows remote a...

4.3

CVE-2010-3715

  • EPSS 1.08%
  • Veröffentlicht 25.10.2010 20:01:04
  • Zuletzt bearbeitet 16.06.2026 23:23:23

Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) the RemoveXSS function, and allow re...