Search for packages
| purl | pkg:composer/typo3/cms@4.5.5 |
| Tags | Ghost |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-y3xv-mm5f-nqb7
Aliases: CVE-2011-3583 GHSA-gx4p-6w86-f8jx |
Typo3 SQL injection due to faulty prepared statements It was found that Typo3 Core versions 4.5.0 - 4.5.5 uses prepared statements that, if the parameter values are not properly replaced, could lead to a SQL Injection vulnerability. This issue can only be exploited if two or more parameters are bound to the query and at least two come from user input. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-07-01T18:12:57.758716+00:00 | GitLab Importer | Affected by | VCID-y3xv-mm5f-nqb7 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms/CVE-2011-3583.yml | 36.1.3 |
| 2025-07-01T14:31:39.213718+00:00 | GHSA Importer | Affected by | VCID-y3xv-mm5f-nqb7 | https://github.com/advisories/GHSA-gx4p-6w86-f8jx | 36.1.3 |