Show filters
200 Total Results
Displaying 81-90 of 200
Sort by:
Attacker Value
Unknown

CVE-2011-4629

Disclosure Date: November 06, 2019 (last updated November 27, 2024)
Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to inject arbitrary web script or HTML via the admin panel.
Attacker Value
Unknown

CVE-2011-4904

Disclosure Date: November 06, 2019 (last updated November 27, 2024)
TYPO3 before 4.4.9 and 4.5.x before 4.5.4 does not apply proper access control on ExtDirect calls which allows remote attackers to retrieve ExtDirect endpoint services.
Attacker Value
Unknown

CVE-2011-4631

Disclosure Date: November 06, 2019 (last updated November 27, 2024)
Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to inject arbitrary web script or HTML via the system extension recycler.
Attacker Value
Unknown

CVE-2011-4628

Disclosure Date: November 06, 2019 (last updated November 27, 2024)
TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to bypass authentication mechanisms in the backend through a crafted request.
Attacker Value
Unknown

CVE-2011-4900

Disclosure Date: November 06, 2019 (last updated November 27, 2024)
TYPO3 before 4.5.4 allows Information Disclosure in the backend.
Attacker Value
Unknown

CVE-2011-4901

Disclosure Date: November 06, 2019 (last updated November 27, 2024)
TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to extract arbitrary information from the TYPO3 database.
Attacker Value
Unknown

CVE-2010-3674

Disclosure Date: November 05, 2019 (last updated November 27, 2024)
TYPO3 before 4.4.1 allows XSS in the frontend search box.
Attacker Value
Unknown

CVE-2010-3670

Disclosure Date: November 05, 2019 (last updated November 27, 2024)
TYPO3 before 4.3.4 and 4.4.x before 4.4.1 contains insecure randomness during generation of a hash with the "forgot password" function.
Attacker Value
Unknown

CVE-2010-3672

Disclosure Date: November 05, 2019 (last updated November 27, 2024)
TYPO3 before 4.3.4 and 4.4.x before 4.4.1 allows XSS in the textarea view helper in an extbase extension.
Attacker Value
Unknown

CVE-2010-3673

Disclosure Date: November 05, 2019 (last updated November 27, 2024)
TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows information disclosure in the mail header of the HTML mailing API.