EUVD-2021-0720

Malware in sbrugna...

EUVD-2022-1625

Malicious code in bioql PyPI...

EUVD-2022-33932

Malicious code in bioql PyPI...

CVE-2022-29601

The seminars aka Seminar Manager extension through 4.1.3 for TYPO3 allows SQL Injection...

ipandlanguageredirect extension vulnerable to SQL Injection

The ipandlanguageredirect extension before 5.1.2 for TYPO3 allows SQL Injection...

CVE-2022-29600

The oelib aka One is Enough Library extension through 4.1.5 for TYPO3 allows SQL Injection...

GHSA-R3RW-H5V8-FF6H CoolURI extension for TYPO3 vulnerable to SQL Injection

SQL injection vulnerability in the CoolURI extension before 1.0.30 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-3632

SQL injection vulnerability in the traditional frontend editing feature in the Frontend Editing subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote authenticated users to execute arbitrary SQL commands via unspecified...

typo3sql.txt

Here is a POC for the typo3 issue to test if you are vulnerable. This doesn't pull the password, just the username : http://path/?&action=getviewcategory&categoryuid=-99%20UNION%20SELECT%20use rname%20FROM%20beusers%20WHERE%20uid=1/ Also, it's easy to pull lists of data from the database using th...