Vulnerabilities

TI-2008-04662 CVE-2008-4905 · GHSA-hg4q-qffw-jqg4

Typo 5.1.3 and earlier uses a hard-coded salt for calculating password hashes, which…

LOW 36

Typo 5.1.3 and earlier uses a hard-coded salt for calculating password hashes, which makes it easier for attackers to guess passwords via a brute force attack.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01478 Published 2008-11-04 No fix listed CWE-330

TI-2008-04661 CVE-2008-4904 · GHSA-qqf9-g7w9-4xrq

SQL injection vulnerability in the "Manage pages" feature (admin/pages) in Typo 5.1.3 and…

LOW 29

SQL injection vulnerability in the "Manage pages" feature (admin/pages) in Typo 5.1.3 and earlier allows remote authenticated users with "blog publisher" rights to execute arbitrary SQL commands via the search[published_…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.00895 Published 2008-11-04 No fix listed CWE-89

TI-2008-04660 CVE-2008-4903 · GHSA-43jj-9cx6-pch8

Cross-site scripting (XSS) vulnerability in the leave comment (feedback) feature in Typo…

LOW 22

Cross-site scripting (XSS) vulnerability in the leave comment (feedback) feature in Typo 5.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) comment[author] (Name) and (2) comment…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01089 Published 2008-11-04 No fix listed CWE-79

Vulnerabilities

Filters

Typo 5.1.3 and earlier uses a hard-coded salt for calculating password hashes, which…

SQL injection vulnerability in the "Manage pages" feature (admin/pages) in Typo 5.1.3 and…

Cross-site scripting (XSS) vulnerability in the leave comment (feedback) feature in Typo…