Search for packages
| purl | pkg:composer/typo3/cms@4.4.0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 10.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-8grp-3j5v-543g
Aliases: CVE-2011-4901 |
Typo3 Arbitrary Information Disclosure TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to extract arbitrary … | There are no reported fixed by versions. |
|
GHSA-9vxq-mxw5-mcgp
Aliases: CVE-2011-4902 |
Typo3 Arbitrary File Delete TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to delete arbitrary … | There are no reported fixed by versions. |
|
GHSA-h86g-796f-hhfq
Aliases: CVE-2011-4632 |
Typo3 XSS Vulnerabilities Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers … | There are no reported fixed by versions. |
|
GHSA-29wr-24h5-95r5
Aliases: CVE-2011-4630 |
Typo3 XSS Vulnerability Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers … | There are no reported fixed by versions. |
|
GHSA-frf4-5p2c-c3ff
Aliases: CVE-2011-4627 |
Typo3 Information Disclosure TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows Information Disclosure on the backend. | There are no reported fixed by versions. |
|
GHSA-q22w-r5qq-v3wf
Aliases: CVE-2011-4903 |
Typo3 XSS in RemoveXSS function Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows … | There are no reported fixed by versions. |
|
GHSA-79gv-5cgx-x6rx
Aliases: CVE-2011-4628 |
Typo3 Authentication Bypass TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to bypass authentication mechanisms … | There are no reported fixed by versions. |
|
GHSA-w736-qv86-vq94
Aliases: CVE-2010-3714 |
TYPO3 Remote File Disclosure vulnerability in the jumpUrl mechanism The jumpUrl (aka access tracking) implementation in `tslib/class.tslib_fe.php` in TYPO3 4.2.x … | There are no reported fixed by versions. |
|
GHSA-rmqc-wfjm-3f66
Aliases: CVE-2010-5101 |
TYPO3 Directory Traversal vulnerability Directory traversal vulnerability in the TypoScript setup in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and … | There are no reported fixed by versions. |
|
GHSA-r2w2-2r2x-fpcx
Aliases: CVE-2010-5103 |
TYPO3 SQL Injection vulnerability SQL injection vulnerability in the list module in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and … | There are no reported fixed by versions. |
|
GHSA-q68v-vcjg-r3vp
Aliases: CVE-2012-1607 |
TYPO3 allows remote attackers to obtain the database name via a direct request The Command Line Interface (CLI) script in … | There are no reported fixed by versions. |
|
GHSA-66j3-66cp-6c2m
Aliases: CVE-2010-5099 |
TYPO3 Path Traversal vulnerability The fileDenyPattern functionality in the PHP file inclusion protection API in TYPO3 4.2.x before 4.2.16, 4.3.x … | There are no reported fixed by versions. |
|
GHSA-qfr3-29w6-hwpg
Aliases: CVE-2012-2112 |
Typo3 Exception Handler XSS Cross-site scripting (XSS) vulnerability in the Exception Handler in TYPO3 4.4.x before 4.4.15, 4.5.x before 4.5.15, … | There are no reported fixed by versions. |
|
GHSA-7jfm-px59-99w8
Aliases: CVE-2012-1605 |
Typo3 Extbase Framework Unsafe Deserialization The Extbase Framework in TYPO3 4.6.x through 4.6.6, 4.7, and 6.0 unserializes untrusted data, which … | There are no reported fixed by versions. |
|
GHSA-w3v6-r62r-fvqh
Aliases: CVE-2012-1608 |
Typo3 API XSS Vulnerabilities The `t3lib_div::RemoveXSS` API method in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, … | There are no reported fixed by versions. |
|
GHSA-7wwr-p84q-qr3q
Aliases: CVE-2012-1606 |
Typo3 Backend XSS Vulnerabilities Multiple cross-site scripting (XSS) vulnerabilities in the Backend component in TYPO3 4.4.0 through 4.4.13, 4.5.0 through … | There are no reported fixed by versions. |