Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
typo3 typo3 4.3.4 vulnerabilities and exploits
(subscribe to this query)
4.9
CVSSv2
CVE-2010-3669
TYPO3 prior to 4.2.13, 4.3.x prior to 4.3.4 and 4.4.x prior to 4.4.1 allows XSS and Open Redirection in the frontend login box.
Typo3 Typo3
5.8
CVSSv2
CVE-2010-3661
TYPO3 prior to 4.1.14, 4.2.x prior to 4.2.13, 4.3.x prior to 4.3.4 and 4.4.x prior to 4.4.1 allows Open Redirection on the backend.
Typo3 Typo3
3.5
CVSSv2
CVE-2010-3665
TYPO3 prior to 4.1.14, 4.2.x prior to 4.2.13, 4.3.x prior to 4.3.4 and 4.4.x prior to 4.4.1 allows XSS on the Extension Manager.
Typo3 Typo3
4
CVSSv2
CVE-2010-3664
TYPO3 prior to 4.1.14, 4.2.x prior to 4.2.13, 4.3.x prior to 4.3.4 and 4.4.x prior to 4.4.1 allows Information Disclosure on the backend.
Typo3 Typo3
5
CVSSv2
CVE-2010-3666
TYPO3 prior to 4.1.14, 4.2.x prior to 4.2.13, 4.3.x prior to 4.3.4 and 4.4.x prior to 4.4.1 contains insecure randomness in the uniqid function.
Typo3 Typo3
5
CVSSv2
CVE-2010-3673
TYPO3 prior to 4.2.13, 4.3.x prior to 4.3.4 and 4.4.x prior to 4.4.1 allows information disclosure in the mail header of the HTML mailing API.
Typo3 Typo3
5
CVSSv2
CVE-2010-3668
TYPO3 prior to 4.1.14, 4.2.x prior to 4.2.13, 4.3.x prior to 4.3.4 and 4.4.x prior to 4.4.1 allows Header Injection in the secure download feature jumpurl.
Typo3 Typo3
5
CVSSv2
CVE-2010-3667
TYPO3 prior to 4.1.14, 4.2.x prior to 4.2.13, 4.3.x prior to 4.3.4 and 4.4.x prior to 4.4.1 allows Spam Abuse in the native form content element.
Typo3 Typo3
9.4
CVSSv2
CVE-2010-3671
TYPO3 prior to 4.1.14, 4.2.x prior to 4.2.13, 4.3.x prior to 4.3.4 and 4.4.x prior to 4.4.1 is open to a session fixation attack which allows remote malicious users to hijack a victim's session.
Typo3 Typo3
6.5
CVSSv2
CVE-2010-3663
TYPO3 prior to 4.1.14, 4.2.x prior to 4.2.13, 4.3.x prior to 4.3.4 and 4.4.x prior to 4.4.1 contains an insecure default value of the variable fileDenyPattern which could allow remote malicious users to execute arbitrary code on the backend.
Typo3 Typo3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4367
CVE-2024-35977
CVE-2023-49335
man-in-the-middle
CVE-2024-4947
CVE-2024-31714
memory leak
SQL
CVE-2024-35994
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3