Skip to content
OpenAdvisories

Package · Packagist

typo3/cms-frontend

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium 4.8
    CVE-2010-3670

    TYPO3 is vulnerable to insecure randomness during hash generation in forgot password function

    TYPO3 before 4.3.4 and 4.4.x before 4.4.1 contains insecure randomness during generation of a hash with the "forgot password" function.

    typo3/cms-frontend Packagist
  • Medium 5.3
    CVE-2010-3667

    TYPO3 is vulnerable to Spam Abuse in the native form content element

    TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Spam Abuse in the native form content element.

    typo3/cms-frontend Packagist
  • Low —
    CVE-2010-5098

    TYPO3 Cross-site scripting (XSS) vulnerability in the FORM content object

    Cross-site scripting (XSS) vulnerability in the FORM content object in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

    typo3/cms-frontend Packagist
  • Low —
    CVE-2010-5097

    TYPO3 Cross-site scripting (XSS) vulnerability in the click enlarge functionality

    Cross-site scripting (XSS) vulnerability in the click enlarge functionality in TYPO3 4.3.x before 4.3.9 and 4.4.x before 4.4.5 when the caching framework is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    typo3/cms-frontend Packagist