Search for packages
| purl | pkg:composer/typo3/cms@4.6.0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-qmmw-ch2q-j6xx
Aliases: CVE-2012-6147 |
Typo3 Backend API XSS Vulnerability Cross-site scripting (XSS) vulnerability in the tree render API (TCA-Tree) in the Backend API in … | There are no reported fixed by versions. |
|
GHSA-7w6c-5pr4-7qvp
Aliases: CVE-2012-3528 |
Typo3 Backend XSS Vulnerability Multiple cross-site scripting (XSS) vulnerabilities in the backend in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 … | There are no reported fixed by versions. |
|
GHSA-p9wg-jvj4-cx26
Aliases: CVE-2012-3531 |
Typo3 Install Tool XSS Vulnerability Cross-site scripting (XSS) vulnerability in the Install Tool in TYPO3 4.5.x before 4.5.19, 4.6.x before … | There are no reported fixed by versions. |
|
GHSA-q68v-vcjg-r3vp
Aliases: CVE-2012-1607 |
TYPO3 allows remote attackers to obtain the database name via a direct request The Command Line Interface (CLI) script in … | There are no reported fixed by versions. |
|
GHSA-94c2-g68f-9r98
Aliases: CVE-2012-3530 |
Typo3 API XSS Vulnerability Incomplete blacklist vulnerability in the `t3lib_div::quoteJSvalue` API function in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 … | There are no reported fixed by versions. |
|
GHSA-2hp4-8h6h-93rr
Aliases: CVE-2012-6146 |
Typo3 Backend History Module Vulnerable to XSS The Backend History Module in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and … | There are no reported fixed by versions. |
|
GHSA-rgf6-9q7g-55qg
Aliases: CVE-2012-6148 |
Typo3 Function Menu API XSS Vulnerability Cross-site scripting (XSS) vulnerability in the function menu API in TYPO3 4.5.x before 4.5.21, … | There are no reported fixed by versions. |
|
GHSA-m4hw-r893-xh4g
Aliases: CVE-2012-3527 |
TYPO3 allows remote authenticated backend users to unserialize arbitrary objects view_help.php in the backend help system in TYPO3 4.5.x before … | There are no reported fixed by versions. |
|
GHSA-w563-rq37-cvq5
Aliases: CVE-2012-6145 |
Typo3 Backend History Module Vulnerable to XSS Cross-site scripting (XSS) vulnerability in the Backend History module in TYPO3 4.5.x before … | There are no reported fixed by versions. |
|
GHSA-v6xv-rmqc-wcc8
Aliases: CVE-2014-9508 |
Typo3 Open Redirect In Frontend Rendering The frontend rendering component in TYPO3 4.5.x before 4.5.39, 4.6.x through 6.2.x before 6.2.9, … |
Vulnerable |
|
GHSA-7gg8-3r6j-5g55
Aliases: CVE-2012-3529 |
Typo3 Backend Configuration XSS Vulnerability The configuration module in the backend in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and … | There are no reported fixed by versions. |
|
GHSA-qfr3-29w6-hwpg
Aliases: CVE-2012-2112 |
Typo3 Exception Handler XSS Cross-site scripting (XSS) vulnerability in the Exception Handler in TYPO3 4.4.x before 4.4.15, 4.5.x before 4.5.15, … | There are no reported fixed by versions. |
|
CVE-2014-9508
Aliases: GHSA-v6xv-rmqc-wcc8 |
Improper Link Resolution Before File Access ('Link Following') The frontend rendering component in TYPO3 4.5.x before 4.5.39, 4.6.x through 6.2.x … |
Vulnerable Vulnerable |
|
GHSA-5479-gqqr-f9gj
Aliases: CVE-2014-9509 |
Typo3 Vulnerable to Cache Poisoning **Problem Description:** A request URL with arbitrary arguments, but still pointing to the home page … | There are no reported fixed by versions. |
|
GHSA-947m-vgqc-x6v4
Aliases: CVE-2012-6144 |
Typo3 Backend History Module Vulnerable to SQL Injection SQL injection vulnerability in the Backend History module in TYPO3 4.5.x before … | There are no reported fixed by versions. |
|
GHSA-7jfm-px59-99w8
Aliases: CVE-2012-1605 |
Typo3 Extbase Framework Unsafe Deserialization The Extbase Framework in TYPO3 4.6.x through 4.6.6, 4.7, and 6.0 unserializes untrusted data, which … | There are no reported fixed by versions. |
|
GHSA-w3v6-r62r-fvqh
Aliases: CVE-2012-1608 |
Typo3 API XSS Vulnerabilities The `t3lib_div::RemoveXSS` API method in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, … | There are no reported fixed by versions. |
|
GHSA-7wwr-p84q-qr3q
Aliases: CVE-2012-1606 |
Typo3 Backend XSS Vulnerabilities Multiple cross-site scripting (XSS) vulnerabilities in the Backend component in TYPO3 4.4.0 through 4.4.13, 4.5.0 through … | There are no reported fixed by versions. |