Vulnerabilities > Typo3
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2010-03-19 | CVE-2010-1025 | Cross-Site Scripting vulnerability in Chris Wederka TGM Newsletter 0.0.2 Cross-site scripting (XSS) vulnerability in the TGM-Newsletter (tgm_newsletter) extension 0.0.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 4.3 |
| 2010-03-19 | CVE-2010-1024 | SQL Injection vulnerability in Chris Wederka TGM Newsletter 0.0.2 SQL injection vulnerability in the TGM-Newsletter (tgm_newsletter) extension 0.0.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. | 7.5 |
| 2010-03-19 | CVE-2010-1022 | Improper Authentication vulnerability in Marcus Krause T3Sec Saltedpw The TYPO3 Security - Salted user password hashes (t3sec_saltedpw) extension before 0.2.13 for TYPO3 allows remote attackers to bypass authentication via unspecified vectors. | 7.5 |
| 2010-03-19 | CVE-2010-1021 | Cross-Site Scripting vulnerability in Mads Brunn T3Quixplorer Cross-site scripting (XSS) vulnerability in the Typo3 Quixplorer (t3quixplorer) extension before 1.7.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 4.3 |
| 2010-03-19 | CVE-2010-1020 | Cross-Site Scripting vulnerability in Sk-Typo3 SK Simplegallery 0.0.1 Cross-site scripting (XSS) vulnerability in the Simple Gallery (sk_simplegallery) extension 0.0.9 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 4.3 |
| 2010-03-19 | CVE-2010-1019 | SQL Injection vulnerability in Sk-Typo3 SK Simplegallery 0.0.1 SQL injection vulnerability in the Simple Gallery (sk_simplegallery) extension 0.0.9 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. | 7.5 |
| 2010-03-19 | CVE-2010-1018 | SQL Injection vulnerability in Jochen RAU SK Bookreview SQL injection vulnerability in the Book Reviews (sk_bookreview) extension 0.0.12 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. | 7.5 |
| 2010-03-19 | CVE-2010-1017 | SQL Injection vulnerability in Laurent Foulloy SAV Filter Months SQL injection vulnerability in the SAV Filter Months (sav_filter_months) extension before 1.0.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. | 7.5 |
| 2010-03-19 | CVE-2010-1016 | SQL Injection vulnerability in Laurent Foulloy SAV Filter Selectors 1.0.1/1.0.2/1.0.3 SQL injection vulnerability in the SAV Filter Selectors (sav_filter_selectors) extension before 1.0.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. | 7.5 |
| 2010-03-19 | CVE-2010-1015 | SQL Injection vulnerability in Laurent Foulloy SAV Filter ABC SQL injection vulnerability in the SAV Filter Alphabetic (sav_filter_abc) extension before 1.0.9 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. | 7.5 |