Vulnerabilities > Typo3 > Typo3 > 4.7.7

DATE CVE VULNERABILITY TITLE RISK
2013-03-20 CVE-2013-1843 Resource Management Errors vulnerability in Typo3
Open redirect vulnerability in the Access tracking mechanism in TYPO3 4.5.x before 4.5.24, 4.6.x before 4.6.17, 4.7.x before 4.7.9, and 6.0.x before 6.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
network
low complexity
typo3 CWE-399
6.4
2013-03-20 CVE-2013-1842 SQL Injection vulnerability in Typo3
SQL injection vulnerability in the Extbase Framework in TYPO3 4.5.x before 4.5.24, 4.6.x before 4.6.17, 4.7.x before 4.7.9, and 6.0.x before 6.0.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to "the Query Object Model and relation values."
network
low complexity
typo3 CWE-89
7.5