Qwissit TYPO3

TYPO3 security

Basics and attack patterns

12 of 60 questions in the app

Basic pattern of vulnerabilities

  1. Which pattern lies behind most web vulnerabilities? Easy
  2. Which input may a TYPO3 extension trust without checking it? Easy

Types of threats

  1. What happens in cross-site scripting (XSS)? Easy
  2. What does an attacker attempt with SQL injection? Easy
  3. What characterises cross-site request forgery (CSRF)? Easy
  4. What does information disclosure mean? Easy
  5. Why is "security by obscurity" not considered protection? Easy

Attack process

  1. Why do requests for /wp-login.php appear on a new website after only a few days? Easy

OWASP Top 10

  1. Which categories are new in the OWASP Top 10:2025? Medium
  2. To which rank did Security Misconfiguration rise in the OWASP Top 10:2025? Medium

Basic pattern of vulnerabilities

  1. Which of the following cases follow the pattern "data turns into code"? Hard

Cross-site scripting

  1. A guestbook outputs entries with <f:format.raw>. A visitor saves a script that every reader executes. Which classifications are correct? Hard

Certifications & exams

Which exam comes next?

You can already practise for 19 exams, and 21 are up for a vote. See all certifications with their official information, cast your vote or suggest your exam.

See all certifications