Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 8

Export CSV
CVE-2009-4802

SQL injection vulnerability in the Flat Manager (flatmgr) extension before 1.9.16 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Joachim Ruhs Typo3
Products
Flat Manager Typo3
CVE-2009-4948

Cross-site scripting (XSS) vulnerability in the Store Locator extension before 1.2.8 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0 · 4.3 Medium EPSS 1.0% KEV · Not listed
Vendors
Joachim Ruhs Typo3
Products
Locator Typo3
CVE-2009-4949

SQL injection vulnerability in the Store Locator extension before 1.2.8 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Joachim Ruhs Typo3
Products
Locator Typo3
CVE-2010-4950

SQL injection vulnerability in the Event (event) extension before 0.3.7 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Joachim Ruhs Typo3
Products
Event Typo3
CVE-2010-4952

SQL injection vulnerability in the FE user statistic (festat) extension before 0.2.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Joachim Ruhs Typo3
Products
Festat Typo3
CVE-2013-5303

Unspecified vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 has unknown impact and remote attack vectors, related to "Insecure Unserialize."

CVSS 2.0 · 10.0 Critical EPSS 1.9% KEV · Not listed
Vendors
Joachim Ruhs Typo3
Products
Locator Typo3
CVE-2013-5304

SQL injection vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Joachim Ruhs Typo3
Products
Locator Typo3
CVE-2013-5305

Cross-site scripting (XSS) vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0 · 4.3 Medium EPSS 1.3% KEV · Not listed
Vendors
Joachim Ruhs Typo3
Products
Locator Typo3