HOMEVULNERABILITIESVENDORSKennziffer

KennzifferCVEs & Vulnerabilities

5 CVEs affecting Kennziffer products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

5 CVEs→ All vendors

Most Affected Products

ke search 13ke dompdf 1ke questionnaire 1statistics 1
CVE-2014-8874MEDIUM

The ke_questionnaire extension 2.5.2 and earlier for TYPO3 uses predictable names for the questionnaire answer forms, which makes it easier for remote attackers to obtain sensitive information via a direct request.

2 Dec 2014
5.0
CVSS
CVE-2014-6293HIGH

SQL injection vulnerability in the Statistics (ke_stats) extension before 1.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, as exploited in the wild in February 2014.

3 Oct 2014
7.5
CVSS
CVE-2014-6235HIGHpoc

Unspecified vulnerability in the ke DomPDF extension before 0.0.5 for TYPO3 allows remote attackers to execute arbitrary code via unknown vectors.

11 Sep 2014
7.5
CVSS
CVE-2013-5307MEDIUM

Cross-site scripting (XSS) vulnerability in the Faceted Search (ke_search) extension before 1.4.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

16 Aug 2013
4.3
CVSS
CVE-2013-5302HIGH

SQL injection vulnerability in the Faceted Search (ke_search) extension before 1.4.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

16 Aug 2013
7.5
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database