Skip to content
OpenAdvisories

Package · Packagist

t3/dce

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.6
    CVE-2021-31777

    SQL Injection in t3/dce

    The dce (aka Dynamic Content Element) extension 2.2.0 through 2.6.x before 2.6.2, and 2.7.x before 2.7.1, for TYPO3 allows SQL Injection via a backend user account.

    t3/dce Packagist
  • Medium 5.3
    CVE-2014-8328

    DCE extension for Typo3 Discloses Environment Information

    The default configuration in the Dynamic Content Elements (dce) extension before 0.11.5 for TYPO3 allows remote attackers to obtain sensitive installation environment information by reading the update check request.

    t3/dce Packagist