Show filters
297 Total Results
Displaying 91-100 of 297
Sort by:
Attacker Value
Unknown
CVE-2011-4901
Disclosure Date: November 06, 2019 (last updated November 27, 2024)
TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to extract arbitrary information from the TYPO3 database.
0
Attacker Value
Unknown
CVE-2010-3674
Disclosure Date: November 05, 2019 (last updated November 27, 2024)
TYPO3 before 4.4.1 allows XSS in the frontend search box.
0
Attacker Value
Unknown
CVE-2010-3670
Disclosure Date: November 05, 2019 (last updated November 27, 2024)
TYPO3 before 4.3.4 and 4.4.x before 4.4.1 contains insecure randomness during generation of a hash with the "forgot password" function.
0
Attacker Value
Unknown
CVE-2010-3672
Disclosure Date: November 05, 2019 (last updated November 27, 2024)
TYPO3 before 4.3.4 and 4.4.x before 4.4.1 allows XSS in the textarea view helper in an extbase extension.
0
Attacker Value
Unknown
CVE-2010-3673
Disclosure Date: November 05, 2019 (last updated November 27, 2024)
TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows information disclosure in the mail header of the HTML mailing API.
0
Attacker Value
Unknown
CVE-2010-3671
Disclosure Date: November 05, 2019 (last updated November 27, 2024)
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 is open to a session fixation attack which allows remote attackers to hijack a victim's session.
0
Attacker Value
Unknown
CVE-2010-3669
Disclosure Date: November 04, 2019 (last updated November 27, 2024)
TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS and Open Redirection in the frontend login box.
0
Attacker Value
Unknown
CVE-2010-3668
Disclosure Date: November 04, 2019 (last updated November 27, 2024)
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Header Injection in the secure download feature jumpurl.
0
Attacker Value
Unknown
CVE-2010-3662
Disclosure Date: November 04, 2019 (last updated November 27, 2024)
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows SQL Injection on the backend.
0
Attacker Value
Unknown
CVE-2010-3663
Disclosure Date: November 04, 2019 (last updated November 27, 2024)
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 contains an insecure default value of the variable fileDenyPattern which could allow remote attackers to execute arbitrary code on the backend.
0
