National Vulnerability Database

National Vulnerability Database

National Vulnerability
Database

Search Results (Refine Search)

Search Parameters:
  • Contains Software Flaws (CVE)
  • CPE Product Version: cpe:/a:typo3:typo3:8.7.4
There are 225 matching records.
Displaying matches 141 through 160.
Vuln ID Summary CVSS Severity
CVE-2009-4394

SQL injection vulnerability in the Random Prayer 2 (ste_prayer2) extension 0.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Published: December 22, 2009; 06:30:00 PM -05:00
    V2: 7.5 HIGH
CVE-2009-4393

SQL injection vulnerability in the Document Directorys (danp_documentdirs) extension 1.10.7 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Published: December 22, 2009; 06:30:00 PM -05:00
    V2: 7.5 HIGH
CVE-2009-4392

SQL injection vulnerability in the XDS Staff List (xds_staff) extension 0.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Published: December 22, 2009; 06:30:00 PM -05:00
    V2: 7.5 HIGH
CVE-2009-4391

Cross-site scripting (XSS) vulnerability in the File list (dr_blob) extension 2.1.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Published: December 22, 2009; 06:30:00 PM -05:00
    V2: 4.3 MEDIUM
CVE-2009-4390

SQL injection vulnerability in the Car (car) extension 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Published: December 22, 2009; 06:30:00 PM -05:00
    V2: 7.5 HIGH
CVE-2009-4389

Unspecified vulnerability in the Watchdog (aba_watchdog) extension 2.0.2 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown attack vectors.

Published: December 22, 2009; 06:30:00 PM -05:00
    V2: 5.0 MEDIUM
CVE-2009-4388

Cross-site scripting (XSS) vulnerability in the ListMan (nl_listman) extension 1.2.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Published: December 22, 2009; 06:30:00 PM -05:00
    V2: 4.3 MEDIUM
CVE-2009-4346

Cross-site scripting (XSS) vulnerability in the Frontend news submitter with RTE (fe_rtenews) extension 1.4.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Published: December 17, 2009; 12:30:00 PM -05:00
    V2: 4.3 MEDIUM
CVE-2009-4345

Cross-site scripting (XSS) vulnerability in the vShoutbox (vshoutbox) extension 0.0.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Published: December 17, 2009; 12:30:00 PM -05:00
    V2: 4.3 MEDIUM
CVE-2009-4344

Cross-site scripting (XSS) vulnerability in the ZID Linkliste (zid_linklist) extension 1.0.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Published: December 17, 2009; 12:30:00 PM -05:00
    V2: 4.3 MEDIUM
CVE-2009-4343

Cross-site scripting (XSS) vulnerability in the Training Company Database (trainincdb) extension 0.4.7 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Published: December 17, 2009; 12:30:00 PM -05:00
    V2: 4.3 MEDIUM
CVE-2009-4342

SQL injection vulnerability in the Job Exchange (jobexchange) extension 0.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

Published: December 17, 2009; 12:30:00 PM -05:00
    V2: 7.5 HIGH
CVE-2009-4341

SQL injection vulnerability in the No indexed Search (no_indexed_search) extension 0.2.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

Published: December 17, 2009; 12:30:00 PM -05:00
    V2: 7.5 HIGH
CVE-2009-4340

Cross-site scripting (XSS) vulnerability in the No indexed Search (no_indexed_search) extension 0.2.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Published: December 17, 2009; 12:30:00 PM -05:00
    V2: 4.3 MEDIUM
CVE-2009-4339

SQL injection vulnerability in the Subscription (mf_subscription) extension 0.2.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

Published: December 17, 2009; 12:30:00 PM -05:00
    V2: 7.5 HIGH
CVE-2009-4338

SQL injection vulnerability in the Flash SlideShow (slideshow) extension 0.2.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

Published: December 17, 2009; 12:30:00 PM -05:00
    V2: 7.5 HIGH
CVE-2009-4337

SQL injection vulnerability in the Diocese of Portsmouth Calendar (pd_calendar) extension 0.4.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors, a different issue than CVE-2008-6691.

Published: December 17, 2009; 12:30:00 PM -05:00
    V2: 7.5 HIGH
CVE-2009-4336

Cross-site scripting (XSS) vulnerability in the Diocese of Portsmouth Calendar (pd_calendar) extension 0.4.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Published: December 17, 2009; 12:30:00 PM -05:00
    V2: 4.3 MEDIUM
CVE-2009-4167

Unspecified vulnerability in the Automatic Base Tags for RealUrl (lt_basetag) extension 1.0.0 for TYPO3 allows remote attackers to conduct "Cache spoofing" attacks via unspecified vectors.

Published: December 02, 2009; 12:30:00 PM -05:00
    V2: 6.4 MEDIUM
CVE-2009-4166

SQL injection vulnerability in the Trips (mchtrips) extension 2.0.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Published: December 02, 2009; 12:30:00 PM -05:00
    V2: 7.5 HIGH