| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2009-4951 | 5.0 |
Unspecified vulnerability in the ClickStream Analyzer [output] (alternet_csa_out) extension 0.3.0 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors.
|
23-07-2010 - 04:00 | 22-07-2010 - 18:30 | |
| CVE-2009-4952 | 10.0 |
Directory traversal vulnerability in the Directory Listing (dir_listing) extension 1.1.0 and earlier for TYPO3 allows remote attackers to have an unspecified impact via unknown vectors.
|
23-07-2010 - 04:00 | 22-07-2010 - 18:30 | |
| CVE-2009-4956 | 4.3 |
Cross-site scripting (XSS) vulnerability in the Visitor Tracking (ws_stats) extension before 0.1.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
23-07-2010 - 04:00 | 22-07-2010 - 18:30 | |
| CVE-2009-4954 | 7.5 |
SQL injection vulnerability in the Versatile Calendar Extension [VCE] (sk_calendar) extension before 0.3.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
|
23-07-2010 - 04:00 | 22-07-2010 - 18:30 | |
| CVE-2009-4950 | 7.5 |
SQL injection vulnerability in the A21glossary Advanced Output (a21glossary_advanced_output) extension before 0.1.12 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
|
23-07-2010 - 04:00 | 22-07-2010 - 18:30 | |
| CVE-2009-4948 | 4.3 |
Cross-site scripting (XSS) vulnerability in the Store Locator extension before 1.2.8 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
23-07-2010 - 04:00 | 22-07-2010 - 18:30 | |
| CVE-2009-4953 | 4.3 |
Cross-site scripting (XSS) vulnerability in the Userdata Create/Edit (sg_userdata) extension before 0.91.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
23-07-2010 - 04:00 | 22-07-2010 - 18:30 | |
| CVE-2009-4949 | 7.5 |
SQL injection vulnerability in the Store Locator extension before 1.2.8 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
|
23-07-2010 - 04:00 | 22-07-2010 - 18:30 | |
| CVE-2009-4955 | 7.5 |
SQL injection vulnerability in the ultraCards (th_ultracards) extension before 0.5.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
|
23-07-2010 - 04:00 | 22-07-2010 - 18:30 |