PT-2024-28250

Name of the Vulnerable Software and Affected Versions events2 extension versions prior to 8.3.8 events2 extension versions 9.x prior to 9.0.6 Description An issue in the events2 extension for TYPO3 involves missing access checks in the management plugin, leading to an insecure direct object...

TYPO3 Security Vulnerabilities

TYPO3 is a free and open source content management system framework CMS/CMF from the Swiss TYPO3 Association. A security vulnerability exists in TYPO3 versions prior to 8.3.8, and 9.x versions prior to 9.0.6, which stems from the presence of an insecure direct object reference IDOR vulnerability,...

CVE-2015-1559

Multiple cross-site request forgery CSRF vulnerabilities in administrator.php in Epignosis eFront Open Source Edition before 3.6.15.3 build 18022 allow remote attackers to hijack the authentication of administrators for requests that 1 delete modules via the deletemodule parameter, 2 deactivate...