CE
Product
Commerce Extension
2
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Commerce Extension to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-4963 | – | Jul 28 | Cross-site scripting (XSS) vulnerability in the Commerce extension before 0.9.9 for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified… Affected: through 0.9.8; 0.8.32; 0.8.35; 0.9.0; 0.9.5; 0.9.6; +1 more |
| CVE-2008-5609 | – | Dec 17 | SQL injection vulnerability in the Commerce extension 0.9.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors Affected: through 0.9.6; 0.8.32; 0.8.35; 0.9.0; 0.9.5 |
Showing 2