Search for packages
| purl | pkg:composer/typo3/cms@4.2.0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 10.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-w736-qv86-vq94
Aliases: CVE-2010-3714 |
TYPO3 Remote File Disclosure vulnerability in the jumpUrl mechanism The jumpUrl (aka access tracking) implementation in `tslib/class.tslib_fe.php` in TYPO3 4.2.x … | There are no reported fixed by versions. |
|
GHSA-rmqc-wfjm-3f66
Aliases: CVE-2010-5101 |
TYPO3 Directory Traversal vulnerability Directory traversal vulnerability in the TypoScript setup in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and … | There are no reported fixed by versions. |
|
GHSA-r2w2-2r2x-fpcx
Aliases: CVE-2010-5103 |
TYPO3 SQL Injection vulnerability SQL injection vulnerability in the list module in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and … | There are no reported fixed by versions. |
|
GHSA-c22j-84c7-cm77
Aliases: CVE-2009-0815 |
TYPO3 leaks a hash secret in an error message The jumpUrl mechanism in class.tslib_fe.php in TYPO3 3.3.x through 3.8.x, 4.0 … | There are no reported fixed by versions. |
|
GHSA-66j3-66cp-6c2m
Aliases: CVE-2010-5099 |
TYPO3 Path Traversal vulnerability The fileDenyPattern functionality in the PHP file inclusion protection API in TYPO3 4.2.x before 4.2.16, 4.3.x … | There are no reported fixed by versions. |
|
GHSA-hwrc-w5gg-f335
Aliases: CVE-2009-3635 |
TYPO3 Install Tool Subcomponent Allows Access Using Only a Password's MD5 Hash as a Credential The Install Tool subcomponent in … | There are no reported fixed by versions. |
|
CVE-2009-0816
Aliases: GHSA-jg55-3q6h-2ccf |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Multiple cross-site scripting (XSS) vulnerabilities in the backend user interface … | There are no reported fixed by versions. |
|
GHSA-q45q-5233-229p
Aliases: CVE-2009-0256 |
Authentication library in TYPO3 vulnerable to session fixation Session fixation vulnerability in the authentication library in TYPO3 4.0.0 through 4.0.9, … | There are no reported fixed by versions. |
|
GHSA-74w6-ww7w-45j9
Aliases: CVE-2009-0258 |
Indexed Search Engine for TYPO3 Command Execution via Metacharacter Injection The Indexed Search Engine (indexed_search) system extension in TYPO3 4.0.0 … | There are no reported fixed by versions. |
|
GHSA-jg55-3q6h-2ccf
Aliases: CVE-2009-0816 |
Typo3 Backend XSS Vulnerability An Information Disclosure vulnerability in jumpUrl mechanism, used to track access on web pages and provided … | There are no reported fixed by versions. |