Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
typo3 typo3 4.3.4 vulnerabilities and exploits
(subscribe to this query)
356
VMScore
CVE-2010-3664
TYPO3 prior to 4.1.14, 4.2.x prior to 4.2.13, 4.3.x prior to 4.3.4 and 4.4.x prior to 4.4.1 allows Information Disclosure on the backend.
Typo3 Typo3
516
VMScore
CVE-2010-3661
TYPO3 prior to 4.1.14, 4.2.x prior to 4.2.13, 4.3.x prior to 4.3.4 and 4.4.x prior to 4.4.1 allows Open Redirection on the backend.
Typo3 Typo3
312
VMScore
CVE-2010-3665
TYPO3 prior to 4.1.14, 4.2.x prior to 4.2.13, 4.3.x prior to 4.3.4 and 4.4.x prior to 4.4.1 allows XSS on the Extension Manager.
Typo3 Typo3
436
VMScore
CVE-2010-3669
TYPO3 prior to 4.2.13, 4.3.x prior to 4.3.4 and 4.4.x prior to 4.4.1 allows XSS and Open Redirection in the frontend login box.
Typo3 Typo3
445
VMScore
CVE-2010-3666
TYPO3 prior to 4.1.14, 4.2.x prior to 4.2.13, 4.3.x prior to 4.3.4 and 4.4.x prior to 4.4.1 contains insecure randomness in the uniqid function.
Typo3 Typo3
445
VMScore
CVE-2010-3673
TYPO3 prior to 4.2.13, 4.3.x prior to 4.3.4 and 4.4.x prior to 4.4.1 allows information disclosure in the mail header of the HTML mailing API.
Typo3 Typo3
445
VMScore
CVE-2010-3667
TYPO3 prior to 4.1.14, 4.2.x prior to 4.2.13, 4.3.x prior to 4.3.4 and 4.4.x prior to 4.4.1 allows Spam Abuse in the native form content element.
Typo3 Typo3
445
VMScore
CVE-2010-3668
TYPO3 prior to 4.1.14, 4.2.x prior to 4.2.13, 4.3.x prior to 4.3.4 and 4.4.x prior to 4.4.1 allows Header Injection in the secure download feature jumpurl.
Typo3 Typo3
837
VMScore
CVE-2010-3671
TYPO3 prior to 4.1.14, 4.2.x prior to 4.2.13, 4.3.x prior to 4.3.4 and 4.4.x prior to 4.4.1 is open to a session fixation attack which allows remote malicious users to hijack a victim's session.
Typo3 Typo3
578
VMScore
CVE-2010-3663
TYPO3 prior to 4.1.14, 4.2.x prior to 4.2.13, 4.3.x prior to 4.3.4 and 4.4.x prior to 4.4.1 contains an insecure default value of the variable fileDenyPattern which could allow remote malicious users to execute arbitrary code on the backend.
Typo3 Typo3
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463
CVE-2024-29895
inject
CVE-2023-52689
CVE-2024-5049
CVE-2024-5051
privilege escalation
physical
CVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3