Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/typo3/cms@4.3.0
purl pkg:composer/typo3/cms@4.3.0
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 10.0
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
GHSA-w736-qv86-vq94
Aliases:
CVE-2010-3714
TYPO3 Remote File Disclosure vulnerability in the jumpUrl mechanism The jumpUrl (aka access tracking) implementation in `tslib/class.tslib_fe.php` in TYPO3 4.2.x … There are no reported fixed by versions.
GHSA-rmqc-wfjm-3f66
Aliases:
CVE-2010-5101
TYPO3 Directory Traversal vulnerability Directory traversal vulnerability in the TypoScript setup in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and … There are no reported fixed by versions.
GHSA-r2w2-2r2x-fpcx
Aliases:
CVE-2010-5103
TYPO3 SQL Injection vulnerability SQL injection vulnerability in the list module in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and … There are no reported fixed by versions.
GHSA-4h9j-f98m-p4hg
Aliases:
CVE-2010-1153
TYPO3 PHP remote file inclusion vulnerability PHP remote file inclusion vulnerability in the autoloader in TYPO3 4.3.x before 4.3.3 allows … There are no reported fixed by versions.
GHSA-66j3-66cp-6c2m
Aliases:
CVE-2010-5099
TYPO3 Path Traversal vulnerability The fileDenyPattern functionality in the PHP file inclusion protection API in TYPO3 4.2.x before 4.2.16, 4.3.x … There are no reported fixed by versions.
This package is not known to fix any advisories.