CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2009-4740
https://notcve.org/view.php?id=CVE-2009-4740
Directory traversal vulnerability in the Webesse E-Card (ws_ecard) extension 1.0.2 and earlier for TYPO3 has unspecified impact and remote attack vectors. Vulnerabilidad de salto de directorio en la extensión Webesse E-Card (ws_ecard) v1.0.2 y anteriores para TYPO3, tiene vectores de ataque remotos e impacto no especificados. • http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-010 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 7.5EPSS: 0%CPEs: 5EXPL: 0CVE-2010-1016
https://notcve.org/view.php?id=CVE-2010-1016
SQL injection vulnerability in the SAV Filter Selectors (sav_filter_selectors) extension before 1.0.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Vulnerabilidad de inyección SQL en la extensión SAV Filter Selectors (sav_filter_selectors)anterior a v1.0.5 para TYPO3 permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores sin especificar. • http://typo3.org/extensions/repository/view/sav_filter_selectors/1.0.5 http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006 http://www.securityfocus.com/bid/38804 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2010-1024
https://notcve.org/view.php?id=CVE-2010-1024
SQL injection vulnerability in the TGM-Newsletter (tgm_newsletter) extension 0.0.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Vulnerabilidad de inyección SQL en la extensión TGM-Newsletter (tgm_newsletter) v0.0.2 para TYPO3 permite a atacantes remotos ejecutar comandos SQL de su elección a través de vectores sin especificar. • http://typo3.org/extensions/repository/view/tgm_newsletter/0.0.3 http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006 http://www.securityfocus.com/bid/38805 https://exchange.xforce.ibmcloud.com/vulnerabilities/56978 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 5.0EPSS: 0%CPEs: 2EXPL: 0CVE-2010-1007
https://notcve.org/view.php?id=CVE-2010-1007
Unspecified vulnerability in the Power Extension Manager (ch_lightem) extension 1.0.34 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors. Vulnerabilidad sin especificar en la extensión Power Extension Manager (ch_lightem) v1.0.34 y anteriores para TYPO3 permite a atacantes remotos obtener información sensible a través de vectores desconocidos. • http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006 http://www.securityfocus.com/bid/38811 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 4.3EPSS: 0%CPEs: 3EXPL: 0CVE-2010-1020
https://notcve.org/view.php?id=CVE-2010-1020
Cross-site scripting (XSS) vulnerability in the Simple Gallery (sk_simplegallery) extension 0.0.9 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en la extensión Simple Gallery (sk_simplegallery) v0.0.9 y anteriores para TYPO3 permite a atacantes remotos inyectar código web o HTML de su elección a través de vectores sin especificar. • http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006 http://www.securityfocus.com/bid/38796 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •