Typosphere

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Typosphere records in CISA KEV

No Typosphere vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Typo 3 records LOW

Records

3 records

TI-2008-04662 CVE-2008-4905 · GHSA-hg4q-qffw-jqg4

Typo 5.1.3 and earlier uses a hard-coded salt for calculating password hashes, which…

LOW 36

Typo 5.1.3 and earlier uses a hard-coded salt for calculating password hashes, which makes it easier for attackers to guess passwords via a brute force attack.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01478 Published 2008-11-04 No fix listed CWE-330

TI-2008-04661 CVE-2008-4904 · GHSA-qqf9-g7w9-4xrq

SQL injection vulnerability in the "Manage pages" feature (admin/pages) in Typo 5.1.3 and…

LOW 29

SQL injection vulnerability in the "Manage pages" feature (admin/pages) in Typo 5.1.3 and earlier allows remote authenticated users with "blog publisher" rights to execute arbitrary SQL commands via the search[published_…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.00895 Published 2008-11-04 No fix listed CWE-89

TI-2008-04660 CVE-2008-4903 · GHSA-43jj-9cx6-pch8

Cross-site scripting (XSS) vulnerability in the leave comment (feedback) feature in Typo…

LOW 22

Cross-site scripting (XSS) vulnerability in the leave comment (feedback) feature in Typo 5.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) comment[author] (Name) and (2) comment…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01089 Published 2008-11-04 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0