Show filters
297 Total Results
Displaying 101-110 of 297
Sort by:
Attacker Value
Unknown
CVE-2010-3665
Disclosure Date: November 04, 2019 (last updated November 27, 2024)
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS on the Extension Manager.
0
Attacker Value
Unknown
CVE-2010-3666
Disclosure Date: November 04, 2019 (last updated November 27, 2024)
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 contains insecure randomness in the uniqid function.
0
Attacker Value
Unknown
CVE-2010-3664
Disclosure Date: November 04, 2019 (last updated November 27, 2024)
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Information Disclosure on the backend.
0
Attacker Value
Unknown
CVE-2010-3667
Disclosure Date: November 04, 2019 (last updated November 27, 2024)
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Spam Abuse in the native form content element.
0
Attacker Value
Unknown
CVE-2010-3661
Disclosure Date: November 01, 2019 (last updated November 27, 2024)
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Open Redirection on the backend.
0
Attacker Value
Unknown
CVE-2010-3660
Disclosure Date: November 01, 2019 (last updated November 27, 2024)
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS on the backend.
0
Attacker Value
Unknown
CVE-2019-12747
Disclosure Date: July 09, 2019 (last updated November 27, 2024)
TYPO3 8.x through 8.7.26 and 9.x through 9.5.7 allows Deserialization of Untrusted Data.
0
Attacker Value
Unknown
CVE-2019-12748
Disclosure Date: July 09, 2019 (last updated November 27, 2024)
TYPO3 8.3.0 through 8.7.26 and 9.0.0 through 9.5.7 allows XSS.
0
Attacker Value
Unknown
CVE-2019-11832
Disclosure Date: May 09, 2019 (last updated November 27, 2024)
TYPO3 8.x before 8.7.25 and 9.x before 9.5.6 allows remote code execution because it does not properly configure the applications used for image processing, as demonstrated by ImageMagick or GraphicsMagick.
0
Attacker Value
Unknown
CVE-2019-11831
Disclosure Date: May 09, 2019 (last updated November 08, 2023)
The PharStreamWrapper (aka phar-stream-wrapper) package 2.x before 2.1.1 and 3.x before 3.1.1 for TYPO3 does not prevent directory traversal, which allows attackers to bypass a deserialization protection mechanism, as demonstrated by a phar:///path/bad.phar/../good.phar URL.
0
