Vulnerabilities in TYPO3 Core

2 results

CVE-2011-3583—It was found that Typo3 Core versions 4.5.0 - 4.5.5 uses prepared statements that, if the parameter values are not properly replaced, could EPSS 1.4%CVE-2011-3584—The TYPO3 Core wec_discussion extension before 2.1.1 is vulnerable to SQL Injection due to improper sanitation of user-supplied input.EPSS 1.2%