Search for packages
| purl | pkg:composer/typo3/cms@4.7.0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.9 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-qmmw-ch2q-j6xx
Aliases: CVE-2012-6147 |
Typo3 Backend API XSS Vulnerability Cross-site scripting (XSS) vulnerability in the tree render API (TCA-Tree) in the Backend API in … | There are no reported fixed by versions. |
|
GHSA-7w6c-5pr4-7qvp
Aliases: CVE-2012-3528 |
Typo3 Backend XSS Vulnerability Multiple cross-site scripting (XSS) vulnerabilities in the backend in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 … | There are no reported fixed by versions. |
|
GHSA-p9wg-jvj4-cx26
Aliases: CVE-2012-3531 |
Typo3 Install Tool XSS Vulnerability Cross-site scripting (XSS) vulnerability in the Install Tool in TYPO3 4.5.x before 4.5.19, 4.6.x before … | There are no reported fixed by versions. |
|
GHSA-55g3-fjwm-w2c8
Aliases: CVE-2014-3942 |
TYPO3 Color Picker Wizard component allows remote authenticated editors to execute arbitrary PHP code The Color Picker Wizard component in … | There are no reported fixed by versions. |
|
GHSA-94c2-g68f-9r98
Aliases: CVE-2012-3530 |
Typo3 API XSS Vulnerability Incomplete blacklist vulnerability in the `t3lib_div::quoteJSvalue` API function in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 … | There are no reported fixed by versions. |
|
GHSA-2hp4-8h6h-93rr
Aliases: CVE-2012-6146 |
Typo3 Backend History Module Vulnerable to XSS The Backend History Module in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and … | There are no reported fixed by versions. |
|
GHSA-rgf6-9q7g-55qg
Aliases: CVE-2012-6148 |
Typo3 Function Menu API XSS Vulnerability Cross-site scripting (XSS) vulnerability in the function menu API in TYPO3 4.5.x before 4.5.21, … | There are no reported fixed by versions. |
|
GHSA-m4hw-r893-xh4g
Aliases: CVE-2012-3527 |
TYPO3 allows remote authenticated backend users to unserialize arbitrary objects view_help.php in the backend help system in TYPO3 4.5.x before … | There are no reported fixed by versions. |
|
GHSA-w563-rq37-cvq5
Aliases: CVE-2012-6145 |
Typo3 Backend History Module Vulnerable to XSS Cross-site scripting (XSS) vulnerability in the Backend History module in TYPO3 4.5.x before … | There are no reported fixed by versions. |
|
GHSA-7gg8-3r6j-5g55
Aliases: CVE-2012-3529 |
Typo3 Backend Configuration XSS Vulnerability The configuration module in the backend in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and … | There are no reported fixed by versions. |
|
GHSA-qfr3-29w6-hwpg
Aliases: CVE-2012-2112 |
Typo3 Exception Handler XSS Cross-site scripting (XSS) vulnerability in the Exception Handler in TYPO3 4.4.x before 4.4.15, 4.5.x before 4.5.15, … | There are no reported fixed by versions. |
|
GHSA-mxjf-hc9v-xgv2
|
ExtJS JavaScript framework used in TYPO3 vulnerable to Cross-site Scripting Failing to properly validate the HTTP host-header TYPO3 CMS is … | There are no reported fixed by versions. |
|
GHSA-45xg-4w5x-j429
|
TYPO3 Arbitrary Shell Execution in Swiftmailer library The swiftmailer library in use allows to execute arbitrary shell commands if the … | There are no reported fixed by versions. |
|
CVE-2014-3943
Aliases: GHSA-qqh2-h6gw-6x8x |
Typo3 XSS Vulnerabilities Multiple cross-site scripting (XSS) vulnerabilities in unspecified backend components in TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, … |
Vulnerable |
|
CVE-2014-3941
Aliases: GHSA-594h-cx6w-p4jf |
Typo3 Host Header Spoofing Vulnerability TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, 6.1.0 before 6.1.9, and 6.2.0 … |
Vulnerable Vulnerable |
|
GHSA-qqh2-h6gw-6x8x
Aliases: CVE-2014-3943 |
Typo3 XSS Vulnerabilities Multiple cross-site scripting (XSS) vulnerabilities in unspecified backend components in TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, … | There are no reported fixed by versions. |
|
GHSA-5479-gqqr-f9gj
Aliases: CVE-2014-9509 |
Typo3 Vulnerable to Cache Poisoning **Problem Description:** A request URL with arbitrary arguments, but still pointing to the home page … | There are no reported fixed by versions. |
|
GHSA-947m-vgqc-x6v4
Aliases: CVE-2012-6144 |
Typo3 Backend History Module Vulnerable to SQL Injection SQL injection vulnerability in the Backend History module in TYPO3 4.5.x before … | There are no reported fixed by versions. |
|
GHSA-594h-cx6w-p4jf
Aliases: CVE-2014-3941 |
Typo3 Host Header Spoofing Vulnerability TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, 6.1.0 before 6.1.9, and 6.2.0 … | There are no reported fixed by versions. |
|
GHSA-47ww-mq32-g4xw
Aliases: CVE-2013-7075 |
TYPO3 vulnerable to Insecure Unserialize via Content Editing Wizards component The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, … | There are no reported fixed by versions. |
|
GHSA-4rpv-g4gq-rh4m
Aliases: CVE-2013-7073 |
TYPO3 vulnerable to Information Disclosure via Content Editing Wizards component The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, … | There are no reported fixed by versions. |
|
GHSA-r8m7-792j-5jvq
Aliases: CVE-2013-7074 |
TYPO3 Cross-Site Scripting (XSS) vulnerabilities in Content Editing Wizards component Multiple cross-site scripting (XSS) vulnerabilities in Content Editing Wizards in … | There are no reported fixed by versions. |