CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2009-4166
https://notcve.org/view.php?id=CVE-2009-4166
SQL injection vulnerability in the Trips (mchtrips) extension 2.0.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Vulnerabilidad de inyección SQL en la extensión Trips (mchtrips) v2.0.0 para TYPO3 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de vectores inespecíficos. • http://typo3.org/extensions/repository/view/mchtrips/2.0.1 http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 3.5EPSS: 0%CPEs: 13EXPL: 0CVE-2009-4159
https://notcve.org/view.php?id=CVE-2009-4159
Cross-site scripting (XSS) vulnerability in the newsletter configuration feature in the backend module in the Direct Mail (direct_mail) extension 2.6.4 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la característica de configuración de newsletter en el módulo backend en la extensión Direct Mail (direct_mail) v2.6.4 y anteriores para TYPO3 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML a través de vectores inespecíficos. • http://secunia.com/advisories/37552 http://typo3.org/extensions/repository/view/direct_mail/2.6.5 http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-018 http://www.securityfocus.com/bid/37166 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0CVE-2009-4164
https://notcve.org/view.php?id=CVE-2009-4164
Cross-site scripting (XSS) vulnerability in the simple Glossar (simple_glossar) extension 1.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la extensión simple Glossar (simple_glossar) v1.0.3 y anteriores para TYPO3 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores inespecíficos. • http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.4EPSS: 0%CPEs: 2EXPL: 0CVE-2009-4167
https://notcve.org/view.php?id=CVE-2009-4167
Unspecified vulnerability in the Automatic Base Tags for RealUrl (lt_basetag) extension 1.0.0 for TYPO3 allows remote attackers to conduct "Cache spoofing" attacks via unspecified vectors. Vulnerabilidad no especificada en la extensión Automatic Base Tags for RealUrl (lt_basetag) v1.0.0 para TYPO3 permite a atacantes remotos conducir un ataque "Cache spoofing" a través de vectores no especificados. • http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017 http://www.securityfocus.com/bid/37169 •
CVSS: 4.3EPSS: 0%CPEs: 59EXPL: 0CVE-2009-3636
https://notcve.org/view.php?id=CVE-2009-3636
Cross-site scripting (XSS) vulnerability in the Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el subcomponente "Install Tool" (herramienta de instalación) en TYPO3 v4.0.13 y anteriores, v4.1.x anteriores a v4.1.13, v4.2.x anteriores a v4.2.10 y v4.3.x anteriores a v4.3beta2. Permite a usuarios remotos inyectar codigo de script web o código HTML a través de parámetros sin especificar. • http://marc.info/?l=oss-security&m=125632856206736&w=2 http://marc.info/?l=oss-security&m=125633199111438&w=2 http://secunia.com/advisories/37122 http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016 http://www.securityfocus.com/bid/36801 http://www.vupen.com/english/advisories/2009/3009 https://exchange.xforce.ibmcloud.com/vulnerabilities/53929 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •