Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/typo3/cms@4.5.4
purl pkg:composer/typo3/cms@4.5.4
Tags Ghost
This package is not known to be subject of any advisories.
Vulnerabilities fixed by this package (9)

Advisory Summary Aliases
GHSA-8grp-3j5v-543g
Typo3 Arbitrary Information Disclosure TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to extract arbitrary … CVE-2011-4901
GHSA-9vxq-mxw5-mcgp
Typo3 Arbitrary File Delete TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to delete arbitrary … CVE-2011-4902
GHSA-h86g-796f-hhfq
Typo3 XSS Vulnerabilities Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers … CVE-2011-4632
GHSA-29wr-24h5-95r5
Typo3 XSS Vulnerability Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers … CVE-2011-4630
GHSA-frf4-5p2c-c3ff
Typo3 Information Disclosure TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows Information Disclosure on the backend. CVE-2011-4627
GHSA-rwx5-7x5r-jgrm
Typo3 Information Disclosure TYPO3 before 4.5.4 allows Information Disclosure in the backend. CVE-2011-4900
GHSA-q22w-r5qq-v3wf
Typo3 XSS in RemoveXSS function Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows … CVE-2011-4903
GHSA-79gv-5cgx-x6rx
Typo3 Authentication Bypass TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to bypass authentication mechanisms … CVE-2011-4628
GHSA-qf79-34j4-54m6
Typo3 Improper Access Control TYPO3 before 4.4.9 and 4.5.x before 4.5.4 does not apply proper access control on ExtDirect calls … CVE-2011-4904