Skip to content
OpenAdvisories

Package · Packagist

typo3/cms-core

128 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

84 results · Clear filters · Feed

  • Medium 5.3
    CVE-2013-1843

    TYPO3 Open redirect vulnerability in the Access tracking mechanism

    Open redirect vulnerability in the Access tracking mechanism in TYPO3 4.5.x before 4.5.24, 4.6.x before 4.6.17, 4.7.x before 4.7.9, and 6.0.x before 6.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspec…

    typo3/cms-core Packagist
  • Medium —
    CVE-2010-5104

    TYPO3 Sensitive Information Disclosure via escapeStrForLike method

    The escapeStrForLike method in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 does not properly escape input when the MySQL database is set to sql_mode NO_BACKSLASH_ESCAPES, which allows remote attackers to obtain sensitive information …

    typo3/cms-core Packagist
  • Medium —
    CVE-2009-3633

    TYPO3 API function vulnerable to Cross-site Scripting

    Cross-site scripting (XSS) vulnerability in the t3lib_div::quoteJSvalue API function in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to inject arbitrary web script or HTML via unspecifie…

    typo3/cms-core Packagist
  • Medium —
    CVE-2008-2717

    TYPO3 Unrestricted File Upload vulnerability

    TYPO3 4.0.x before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.2.1, uses an insufficiently restrictive default fileDenyPattern for Apache, which allows remote attackers to bypass security restrictions and upload configuration files such as .htaccess, or con…

    typo3/cms-core Packagist