Search for packages
| purl | pkg:composer/typo3/cms@4.5.0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-gx4p-6w86-f8jx
Aliases: CVE-2011-3583 |
Typo3 SQL injection due to faulty prepared statements It was found that Typo3 Core versions 4.5.0 - 4.5.5 uses prepared … | There are no reported fixed by versions. |
|
GHSA-8grp-3j5v-543g
Aliases: CVE-2011-4901 |
Typo3 Arbitrary Information Disclosure TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to extract arbitrary … | There are no reported fixed by versions. |
|
GHSA-9vxq-mxw5-mcgp
Aliases: CVE-2011-4902 |
Typo3 Arbitrary File Delete TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to delete arbitrary … | There are no reported fixed by versions. |
|
GHSA-h86g-796f-hhfq
Aliases: CVE-2011-4632 |
Typo3 XSS Vulnerabilities Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers … | There are no reported fixed by versions. |
|
GHSA-29wr-24h5-95r5
Aliases: CVE-2011-4630 |
Typo3 XSS Vulnerability Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers … | There are no reported fixed by versions. |
|
GHSA-frf4-5p2c-c3ff
Aliases: CVE-2011-4627 |
Typo3 Information Disclosure TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows Information Disclosure on the backend. | There are no reported fixed by versions. |
|
GHSA-q22w-r5qq-v3wf
Aliases: CVE-2011-4903 |
Typo3 XSS in RemoveXSS function Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows … | There are no reported fixed by versions. |
|
GHSA-79gv-5cgx-x6rx
Aliases: CVE-2011-4628 |
Typo3 Authentication Bypass TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to bypass authentication mechanisms … | There are no reported fixed by versions. |
|
GHSA-qf79-34j4-54m6
Aliases: CVE-2011-4904 |
Typo3 Improper Access Control TYPO3 before 4.4.9 and 4.5.x before 4.5.4 does not apply proper access control on ExtDirect calls … | There are no reported fixed by versions. |
|
GHSA-qmmw-ch2q-j6xx
Aliases: CVE-2012-6147 |
Typo3 Backend API XSS Vulnerability Cross-site scripting (XSS) vulnerability in the tree render API (TCA-Tree) in the Backend API in … | There are no reported fixed by versions. |
|
GHSA-7w6c-5pr4-7qvp
Aliases: CVE-2012-3528 |
Typo3 Backend XSS Vulnerability Multiple cross-site scripting (XSS) vulnerabilities in the backend in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 … | There are no reported fixed by versions. |
|
GHSA-p9wg-jvj4-cx26
Aliases: CVE-2012-3531 |
Typo3 Install Tool XSS Vulnerability Cross-site scripting (XSS) vulnerability in the Install Tool in TYPO3 4.5.x before 4.5.19, 4.6.x before … | There are no reported fixed by versions. |
|
GHSA-55g3-fjwm-w2c8
Aliases: CVE-2014-3942 |
TYPO3 Color Picker Wizard component allows remote authenticated editors to execute arbitrary PHP code The Color Picker Wizard component in … | There are no reported fixed by versions. |
|
GHSA-q68v-vcjg-r3vp
Aliases: CVE-2012-1607 |
TYPO3 allows remote attackers to obtain the database name via a direct request The Command Line Interface (CLI) script in … | There are no reported fixed by versions. |
|
GHSA-94c2-g68f-9r98
Aliases: CVE-2012-3530 |
Typo3 API XSS Vulnerability Incomplete blacklist vulnerability in the `t3lib_div::quoteJSvalue` API function in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 … | There are no reported fixed by versions. |
|
GHSA-2hp4-8h6h-93rr
Aliases: CVE-2012-6146 |
Typo3 Backend History Module Vulnerable to XSS The Backend History Module in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and … | There are no reported fixed by versions. |
|
GHSA-rgf6-9q7g-55qg
Aliases: CVE-2012-6148 |
Typo3 Function Menu API XSS Vulnerability Cross-site scripting (XSS) vulnerability in the function menu API in TYPO3 4.5.x before 4.5.21, … | There are no reported fixed by versions. |
|
GHSA-m4hw-r893-xh4g
Aliases: CVE-2012-3527 |
TYPO3 allows remote authenticated backend users to unserialize arbitrary objects view_help.php in the backend help system in TYPO3 4.5.x before … | There are no reported fixed by versions. |
|
GHSA-w563-rq37-cvq5
Aliases: CVE-2012-6145 |
Typo3 Backend History Module Vulnerable to XSS Cross-site scripting (XSS) vulnerability in the Backend History module in TYPO3 4.5.x before … | There are no reported fixed by versions. |
|
GHSA-v6xv-rmqc-wcc8
Aliases: CVE-2014-9508 |
Typo3 Open Redirect In Frontend Rendering The frontend rendering component in TYPO3 4.5.x before 4.5.39, 4.6.x through 6.2.x before 6.2.9, … | There are no reported fixed by versions. |
|
GHSA-7gg8-3r6j-5g55
Aliases: CVE-2012-3529 |
Typo3 Backend Configuration XSS Vulnerability The configuration module in the backend in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and … | There are no reported fixed by versions. |
|
GHSA-qfr3-29w6-hwpg
Aliases: CVE-2012-2112 |
Typo3 Exception Handler XSS Cross-site scripting (XSS) vulnerability in the Exception Handler in TYPO3 4.4.x before 4.4.15, 4.5.x before 4.5.15, … | There are no reported fixed by versions. |
|
GHSA-mxjf-hc9v-xgv2
|
ExtJS JavaScript framework used in TYPO3 vulnerable to Cross-site Scripting Failing to properly validate the HTTP host-header TYPO3 CMS is … | There are no reported fixed by versions. |
|
GHSA-45xg-4w5x-j429
|
TYPO3 Arbitrary Shell Execution in Swiftmailer library The swiftmailer library in use allows to execute arbitrary shell commands if the … | There are no reported fixed by versions. |
|
CVE-2014-9508
Aliases: GHSA-v6xv-rmqc-wcc8 |
Improper Link Resolution Before File Access ('Link Following') The frontend rendering component in TYPO3 4.5.x before 4.5.39, 4.6.x through 6.2.x … |
Vulnerable Vulnerable |
|
CVE-2014-3943
Aliases: GHSA-qqh2-h6gw-6x8x |
Typo3 XSS Vulnerabilities Multiple cross-site scripting (XSS) vulnerabilities in unspecified backend components in TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, … |
Vulnerable |
|
CVE-2014-3941
Aliases: GHSA-594h-cx6w-p4jf |
Typo3 Host Header Spoofing Vulnerability TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, 6.1.0 before 6.1.9, and 6.2.0 … |
Vulnerable Vulnerable |
|
GHSA-qqh2-h6gw-6x8x
Aliases: CVE-2014-3943 |
Typo3 XSS Vulnerabilities Multiple cross-site scripting (XSS) vulnerabilities in unspecified backend components in TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, … | There are no reported fixed by versions. |
|
GHSA-5479-gqqr-f9gj
Aliases: CVE-2014-9509 |
Typo3 Vulnerable to Cache Poisoning **Problem Description:** A request URL with arbitrary arguments, but still pointing to the home page … | There are no reported fixed by versions. |
|
GHSA-947m-vgqc-x6v4
Aliases: CVE-2012-6144 |
Typo3 Backend History Module Vulnerable to SQL Injection SQL injection vulnerability in the Backend History module in TYPO3 4.5.x before … | There are no reported fixed by versions. |
|
GHSA-594h-cx6w-p4jf
Aliases: CVE-2014-3941 |
Typo3 Host Header Spoofing Vulnerability TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, 6.1.0 before 6.1.9, and 6.2.0 … | There are no reported fixed by versions. |
|
GHSA-47ww-mq32-g4xw
Aliases: CVE-2013-7075 |
TYPO3 vulnerable to Insecure Unserialize via Content Editing Wizards component The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, … | There are no reported fixed by versions. |
|
GHSA-7jfm-px59-99w8
Aliases: CVE-2012-1605 |
Typo3 Extbase Framework Unsafe Deserialization The Extbase Framework in TYPO3 4.6.x through 4.6.6, 4.7, and 6.0 unserializes untrusted data, which … | There are no reported fixed by versions. |
|
GHSA-4rpv-g4gq-rh4m
Aliases: CVE-2013-7073 |
TYPO3 vulnerable to Information Disclosure via Content Editing Wizards component The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, … | There are no reported fixed by versions. |
|
GHSA-w3v6-r62r-fvqh
Aliases: CVE-2012-1608 |
Typo3 API XSS Vulnerabilities The `t3lib_div::RemoveXSS` API method in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, … | There are no reported fixed by versions. |
|
GHSA-r8m7-792j-5jvq
Aliases: CVE-2013-7074 |
TYPO3 Cross-Site Scripting (XSS) vulnerabilities in Content Editing Wizards component Multiple cross-site scripting (XSS) vulnerabilities in Content Editing Wizards in … | There are no reported fixed by versions. |
|
GHSA-7wwr-p84q-qr3q
Aliases: CVE-2012-1606 |
Typo3 Backend XSS Vulnerabilities Multiple cross-site scripting (XSS) vulnerabilities in the Backend component in TYPO3 4.4.0 through 4.4.13, 4.5.0 through … | There are no reported fixed by versions. |