Search for packages
| purl | pkg:composer/typo3/cms@6.0.0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.9 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-m76j-69c2-c3m8
Aliases: CVE-2013-4321 |
TYPO3 vulnerable to remote authenticated arbitrary code execution The File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.9 and 6.1.x … | There are no reported fixed by versions. |
|
GHSA-989h-wv8x-933p
Aliases: CVE-2015-5956 |
TYPO3 cross-site scripting (XSS) The sanitizeLocalUrl function in TYPO3 6.x before 6.2.15, 7.x before 7.4.0, 4.5.40, and earlier allows remote … |
Vulnerable |
|
GHSA-55g3-fjwm-w2c8
Aliases: CVE-2014-3942 |
TYPO3 Color Picker Wizard component allows remote authenticated editors to execute arbitrary PHP code The Color Picker Wizard component in … | There are no reported fixed by versions. |
|
GHSA-54jj-pxx2-pv8h
Aliases: CVE-2013-4250 |
TYPO3 doesn't properly check file extensions The (1) file upload component and (2) File Abstraction Layer (FAL) in TYPO3 6.0.x … | There are no reported fixed by versions. |
|
CVE-2014-3943
Aliases: GHSA-qqh2-h6gw-6x8x |
Typo3 XSS Vulnerabilities Multiple cross-site scripting (XSS) vulnerabilities in unspecified backend components in TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, … |
Vulnerable |
|
CVE-2014-3941
Aliases: GHSA-594h-cx6w-p4jf |
Typo3 Host Header Spoofing Vulnerability TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, 6.1.0 before 6.1.9, and 6.2.0 … |
Vulnerable Vulnerable |
|
GHSA-qqh2-h6gw-6x8x
Aliases: CVE-2014-3943 |
Typo3 XSS Vulnerabilities Multiple cross-site scripting (XSS) vulnerabilities in unspecified backend components in TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, … | There are no reported fixed by versions. |
|
GHSA-5479-gqqr-f9gj
Aliases: CVE-2014-9509 |
Typo3 Vulnerable to Cache Poisoning **Problem Description:** A request URL with arbitrary arguments, but still pointing to the home page … | There are no reported fixed by versions. |
|
GHSA-594h-cx6w-p4jf
Aliases: CVE-2014-3941 |
Typo3 Host Header Spoofing Vulnerability TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, 6.1.0 before 6.1.9, and 6.2.0 … | There are no reported fixed by versions. |
|
GHSA-47ww-mq32-g4xw
Aliases: CVE-2013-7075 |
TYPO3 vulnerable to Insecure Unserialize via Content Editing Wizards component The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, … | There are no reported fixed by versions. |
|
GHSA-4rpv-g4gq-rh4m
Aliases: CVE-2013-7073 |
TYPO3 vulnerable to Information Disclosure via Content Editing Wizards component The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, … | There are no reported fixed by versions. |
|
GHSA-r8m7-792j-5jvq
Aliases: CVE-2013-7074 |
TYPO3 Cross-Site Scripting (XSS) vulnerabilities in Content Editing Wizards component Multiple cross-site scripting (XSS) vulnerabilities in Content Editing Wizards in … | There are no reported fixed by versions. |