Search for packages
| purl | pkg:composer/typo3/cms@4.4.13 |
| Tags | Ghost |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1grv-8mgr-ekfg
Aliases: CVE-2012-1607 GHSA-q68v-vcjg-r3vp |
TYPO3 allows remote attackers to obtain the database name via a direct request The Command Line Interface (CLI) script in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to obtain the database name via a direct request. | There are no reported fixed by versions. |
|
VCID-3yv4-3421-tqf4
Aliases: CVE-2012-1606 GHSA-7wwr-p84q-qr3q |
Typo3 Backend XSS Vulnerabilities Multiple cross-site scripting (XSS) vulnerabilities in the Backend component in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allow remote authenticated backend users to inject arbitrary web script or HTML via unspecified vectors. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-e9qd-svur-cfh3
Aliases: CVE-2012-1608 GHSA-w3v6-r62r-fvqh |
Typo3 API XSS Vulnerabilities The `t3lib_div::RemoveXSS` API method in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to bypass the cross-site scripting (XSS) protection mechanism and inject arbitrary web script or HTML via non printable characters. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-07-04T13:55:12.571787+00:00 | GitLab Importer | Affected by | VCID-1grv-8mgr-ekfg | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms/CVE-2012-1607.yml | 37.0.0 |
| 2025-07-01T18:13:46.226708+00:00 | GitLab Importer | Affected by | VCID-e9qd-svur-cfh3 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms/CVE-2012-1608.yml | 36.1.3 |
| 2025-07-01T18:13:43.602916+00:00 | GitLab Importer | Affected by | VCID-3yv4-3421-tqf4 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms/CVE-2012-1606.yml | 36.1.3 |