TYPO3-XSS-POC

TYPO3-XSS-POC Typo3 -v9.1.0 Persistent Cross Site ScriptingXSS Assigned CVE Number: CVE-2018-6905...

Luracast Restler 3.0.1 via TYPO3 Restler 1.7.1 - Local File Inclusion

Luracast Restler 3.0.1 via TYPO3 Restler 1.7.1 is susceptible to local file inclusion in public/examples/resources/getsource.php. This could allow remote attackers to read arbitrary files via the file parameter. id: CVE-2017-15363 info: name: Luracast Restler 3.0.1 via TYPO3 Restler 1.7.1 - Local...

TYPO3 ceselector Extension - Insecure Deserialization

TYPO3 extension contains a PHP Object Injection caused by passing attacker-controlled cookie to unserialize without validation, letting remote unauthenticated attackers achieve remote code execution, exploit requires Persistent Mode: Static configuration. id: CVE-2026-46725 info: name: TYPO3...

TYPO3-v7.6.15-Unencrypted-Login-Request

TYPO3-v7.6.15-Unencrypted-Login-Request TYPO3 v7.6.15 Unencrypted Login Request Assigned CVE Number: CVE-2017-6370...

CVE-2026-56096

CVE-2026-56096: Solr Query Injection & Blind Data Extraction in TYPO3 EXT:solr An architectural security vulnerability was discovered in the official TYPO3 Apache Solr extension EXT:solr / apache-solr-for-typo3/solr. The issue allows unauthenticated remote attackers to inject arbitrary Solr/Lucen...

TYPO3-HTML-Sanitizer-XSS-CVE-2023-47125

Stored XSS exploit in TYPO3 HTML Sanitizer CVE-2023-47125 Description DOM processing instructions are not handled correctly. This allows bypassing the cross-site scripting mechanism of typo3/html-sanitizer. Vuln versions = 1.0.0, = 2.0.0,...

CVE-2018-6905

Installation and Execution Steps 0. Install type3 $docker-compose up 1. Start and install typo3 web server Go to http://web-server ip:port/typo3 and ignore the following message: Directory / is not writable Path /var/www/html/typo3 exists, but no file underneath it can be created. 2. Install...

news-8.6.0-cve-2026-8726-backport

Security backport for georgringer/news 8.6.0 This repository contains a minimal backport for CVE-2026-8726 / TYPO3-EXT-SA-2026-010 , a high-severity SQL injection vulnerability in the TYPO3 extension georgringer/news. It is intended only for installations that must temporarily remain on news 8.6....

TYPO3 Shop by coding.ms 6.2.0 Unauthenticated Order Cancellation

TYPO3 Shop by coding.ms versions before 4.9.4, 5.0.0 through 5.21.0, and 6.0.0 through 6.2.0 contain missing authorization in cancelAction, allowing an unauthenticated visitor to cancel a prepared order by supplying its UID. https://packetstorm.news/download/236753...

TYPO3 Shop 6.2.0 PayPal Callback Forgery

TYPO3 Shop by coding.ms versions before 4.9.4, 5.0.0 through 5.21.0, and 6.0.0 through 6.2.0 allow unauthenticated attackers to overwrite stored PayPal callback data for prepared orders. https://packetstorm.news/download/236752...

Exploit for CVE-2026-113468

CVE-2026-113468: EXT:shop stores unauthenticated PayPal paymen...

Exploit for CVE-2026-112071

CVE-2026-112071: any visitor can cancel other people's orders...

CVE-2026-113459

In versions running on TYPO3 10 and 11, the configured OpenAI API key is embedded in every backend page, so that the editor plugin can contact the OpenAI service directly from the browser. Any authenticated backend user can read the key and use it at the expense of the site operator. This only...

CVE-2026-112069

The extension no longer applied its access protection to files in file storages that use a non-default relative base path. These files were served directly by the web server, without any authentication or permission check. The issue is only exploitable when the extension is used on a website...

CVE-2026-112069 Broken Access Control in extension "FAL Protect" (fal_protect)

The extension no longer applied its access protection to files in file storages that use a non-default relative base path. These files were served directly by the web server, without any authentication or permission check. The issue is only exploitable when the extension is used on a website...

CVE-2026-112069

The extension no longer applied its access protection to files in file storages that use a non-default relative base path. These files were served directly by the web server, without any authentication or permission check. The issue is only exploitable when the extension is used on a website...

EUVD-2026-104876

The extension no longer applied its access protection to files in file storages that use a non-default relative base path. These files were served directly by the web server, without any authentication or permission check. The issue is only exploitable when the extension is used on a website...

CVE-2026-112069 Broken Access Control in extension "FAL Protect" (fal_protect)

The extension no longer applied its access protection to files in file storages that use a non-default relative base path. These files were served directly by the web server, without any authentication or permission check. The issue is only exploitable when the extension is used on a website...

CVE-2026-112069

The FAL Protect (fal_protect) extension contains a Broken Access Control vulnerability (CWE-862) when used on websites running TYPO3 14.3 . The extension fails to apply access protection to files within file storages using a non-default relative base path , allowing these files to be served direc...

CVE-2026-112240 Broken Access Control in extension "TYPO3 Fluid-Form by coding.ms" (fluid_form)

The download link for files uploaded through a form relied on a token that could be predicted. The file name in the request was also not verified in a way that resisted guessing. An unauthenticated attacker could use this to access files uploaded by other visitors. In addition, the token was show...