Vulnerabilities > Typo3 > TOI Category

DATE CVE VULNERABILITY TITLE RISK
2012-02-14 CVE-2012-1073 Cross-Site Scripting vulnerability in Typo3 TOI Category
Cross-site scripting (XSS) vulnerability in the Category-System (toi_category) extension 0.6.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
typo3 CWE-79
4.3
4.3
2012-02-14 CVE-2012-1072 SQL Injection vulnerability in Typo3 TOI Category
SQL injection vulnerability in the Category-System (toi_category) extension 0.6.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
network
low complexity
typo3 CWE-89
7.5
7.5