Approved changes feed: RSS · Atom

cpe:2.3:a:typo3:typo3:7.6.5:*:*:*:*:*:*:*

part: a version: 7.6.5 update: *

VendorTypo3 (bebcd01c-0947-5641-89ed-9b814cca944e)
ProductTypo3 (e0e75c36-ce92-5448-bdce-8b59acd8c849)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/typo3/typo3 purl2cpe 2026-06-01 10:16:08.687068
pkg:typo3/typo3.cms.git purl2cpe 2026-06-01 10:16:08.687069

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-14251 vulnerable 2026-06-08 05:08:49.522657 Details available
Unrestricted File Upload vulnerability in the fileDenyPattern in sysext/core/Classes/Core/SystemEnvironmentBuilder.php in TYPO3 7.6.0 to 7.6.21 and 8.0.0 to 8.7.4 allows remote authenticated users to upload files with a .pht extension and consequently execute arbitrary PHP code.
Published: 2017-09-11T09:00:00.000Z
Updated: 2024-08-05T19:20:41.287Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5091 vulnerable 2026-06-08 05:07:56.255975 Details available
Extbase in TYPO3 4.3.0 before 6.2.24, 7.x before 7.6.8, and 8.1.1 allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted Extbase action.
Published: 2017-01-23T21:00:00.000Z
Updated: 2024-08-06T00:53:47.379Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.