Skip to content
OpenAdvisories

Vendor

TYPO3 Core

2 known vulnerabilities.

Products

TYPO3 Core 1 wec_discussion 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2011-3583

    Typo3 SQL injection due to faulty prepared statements

    It was found that Typo3 Core versions 4.5.0 - 4.5.5 uses prepared statements that, if the parameter values are not properly replaced, could lead to a SQL Injection vulnerability. This issue can only be exploited if two or more parameters are bound to the quer…

    TYPO3 Core TYPO3 Core typo3/cms Web / CMS Packagist