CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2010-0324
https://notcve.org/view.php?id=CVE-2010-0324
SQL injection vulnerability in the Customer Reference List (ref_list) extension 1.0.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Vulnerabilidad de inyección SQL en la extensión de TYPO3 de lista de referencia de clientes (ref_list) v1.0.1 y anteriores permite a atacantes remotos ejecutar comandos SQL a través de vectores no especificados. • http://typo3.org/extensions/repository/view/ref_list/1.0.2 http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 5.0EPSS: 0%CPEs: 5EXPL: 0CVE-2010-0325
https://notcve.org/view.php?id=CVE-2010-0325
Unspecified vulnerability in the SB Folderdownload (sb_folderdownload) extension 0.2.2 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown attack vectors. Vulnerabilidad no especificada en la extensión de TYPO3 "SB Folderdownload" (sb_folderdownload) v0.2.2 y anteriores permite a atacantes remotos obtener información sensible a través de vectores de ataque desconocidos. • http://typo3.org/extensions/repository/view/sb_folderdownload/0.2.3 http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021 •
CVSS: 4.3EPSS: 0%CPEs: 16EXPL: 0CVE-2010-0326
https://notcve.org/view.php?id=CVE-2010-0326
Cross-site scripting (XSS) vulnerability in the Developer log (devlog) extension 2.9.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en la extensión de TYPO3 de registro de Desarrollo (devlog) v2.9.1 y anteriores permite a atacantes remotos inyectar HTML o scripts web a través de vectores no especificados. • http://secunia.com/advisories/38164 http://typo3.org/extensions/repository/view/devlog/2.9.2 http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.3EPSS: 0%CPEs: 5EXPL: 0CVE-2010-0327
https://notcve.org/view.php?id=CVE-2010-0327
Cross-site scripting (XSS) vulnerability in the KJ: Imagelightbox (kj_imagelightbox2) extension 2.0.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2008-2490. Vulnerabilidad de ejecución de comandos en sitios cruzados(XSS) en la extensión de TYPO3 "KJ: Imagelightbox" (kj_imagelightbox2) v2.0.0 y anteriores permite a atacantes remotos inyectar HTML o scripts web a través de vectores no especificados. Se trata de una vulnerabilidad distinta a CVE-2008-2490. • http://secunia.com/advisories/38165 http://typo3.org/extensions/repository/view/kj_imagelightbox2/2.0.2 http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0CVE-2010-0328
https://notcve.org/view.php?id=CVE-2010-0328
Cross-site scripting (XSS) vulnerability in the Unit Converter (cs2_unitconv) extension 1.0.4 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de ejecución de comandos en sitios cruzados(XSS) en la extensión de TYPO3 de convertidor de unidades (cs2_unitconv) v1.0.4 permite a atacantes remotos inyectar HTML o scripts web a través de vectores no especificados. • http://secunia.com/advisories/38166 http://typo3.org/extensions/repository/view/cs2_unitconv/1.0.5 http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •