Search for packages
Package details: pkg:composer/typo3/cms@4.6.6
purl pkg:composer/typo3/cms@4.6.6
Tags Ghost
Next non-vulnerable version 10.4.35
Latest non-vulnerable version 12.2.0
Risk 3.1
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-1grv-8mgr-ekfg
Aliases:
CVE-2012-1607
GHSA-q68v-vcjg-r3vp
TYPO3 allows remote attackers to obtain the database name via a direct request The Command Line Interface (CLI) script in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to obtain the database name via a direct request. There are no reported fixed by versions.
VCID-3yv4-3421-tqf4
Aliases:
CVE-2012-1606
GHSA-7wwr-p84q-qr3q
Typo3 Backend XSS Vulnerabilities Multiple cross-site scripting (XSS) vulnerabilities in the Backend component in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allow remote authenticated backend users to inject arbitrary web script or HTML via unspecified vectors.
4.6.7
Affected by 0 other vulnerabilities.
VCID-e9qd-svur-cfh3
Aliases:
CVE-2012-1608
GHSA-w3v6-r62r-fvqh
Typo3 API XSS Vulnerabilities The `t3lib_div::RemoveXSS` API method in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to bypass the cross-site scripting (XSS) protection mechanism and inject arbitrary web script or HTML via non printable characters.
4.6.7
Affected by 0 other vulnerabilities.
VCID-w4nd-1kan-xkgw
Aliases:
CVE-2012-1605
GHSA-7jfm-px59-99w8
Typo3 Extbase Framework Unsafe Deserialization The Extbase Framework in TYPO3 4.6.x through 4.6.6, 4.7, and 6.0 unserializes untrusted data, which allows remote attackers to unserialize arbitrary objects and possibly execute arbitrary code via vectors related to "a missing signature (HMAC) for a request argument."
4.6.7
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-07-04T13:55:12.580771+00:00 GitLab Importer Affected by VCID-1grv-8mgr-ekfg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms/CVE-2012-1607.yml 37.0.0
2025-07-04T13:55:11.993361+00:00 GitLab Importer Affected by VCID-w4nd-1kan-xkgw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms/CVE-2012-1605.yml 37.0.0
2025-07-01T18:13:46.233632+00:00 GitLab Importer Affected by VCID-e9qd-svur-cfh3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms/CVE-2012-1608.yml 36.1.3
2025-07-01T18:13:43.612347+00:00 GitLab Importer Affected by VCID-3yv4-3421-tqf4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms/CVE-2012-1606.yml 36.1.3