TYPO3 4.2.7
Approved changes feed: RSS · Atom
cpe:2.3:a:typo3:typo3:4.2.7:*:*:*:*:*:*:*
part: a version: 4.2.7 update: *
| Vendor | Typo3 (bebcd01c-0947-5641-89ed-9b814cca944e) |
|---|---|
| Product | Typo3 (e0e75c36-ce92-5448-bdce-8b59acd8c849) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/typo3/typo3 |
purl2cpe | 2026-06-01 10:16:08.660117 |
pkg:typo3/typo3.cms.git |
purl2cpe | 2026-06-01 10:16:08.660118 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-3945 |
vulnerable | 2026-06-08 05:05:43.512703 |
Details available
The Authentication component in TYPO3 before 6.2, when salting for password hashing is disabled, does not require knowledge of the cleartext password if the password hash is known, which allows remote attackers to bypass authentication and gain access to the backend by leveraging knowledge of a password hash.
Published: 2014-06-03T14:00:00.000Z
Updated: 2024-08-06T10:57:17.942Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-5104 |
vulnerable | 2026-06-08 04:56:32.204575 |
Details available
The escapeStrForLike method in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 does not properly escape input when the MySQL database is set to sql_mode NO_BACKSLASH_ESCAPES, which allows remote attackers to obtain sensitive information via wildcard characters in a LIKE query.
Published: 2012-05-21T20:00:00.000Z
Updated: 2024-08-07T04:09:39.215Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-5103 |
vulnerable | 2026-06-08 04:56:32.203589 |
Details available
SQL injection vulnerability in the list module in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors.
Published: 2012-05-21T20:00:00.000Z
Updated: 2024-08-07T04:09:38.910Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-5102 |
vulnerable | 2026-06-08 04:56:32.202519 |
Details available
Directory traversal vulnerability in mod/tools/em/class.em_unzip.php in the unzip library in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote attackers to write arbitrary files via unspecified vectors.
Published: 2012-05-21T20:00:00.000Z
Updated: 2024-08-07T04:09:39.200Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-5101 |
vulnerable | 2026-06-08 04:56:32.201512 |
Details available
Directory traversal vulnerability in the TypoScript setup in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote authenticated administrators to read arbitrary files via unspecified vectors related to the "file inclusion functionality."
Published: 2012-05-21T20:00:00.000Z
Updated: 2024-08-07T04:09:39.109Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-5100 |
vulnerable | 2026-06-08 04:56:32.200461 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-5099 |
vulnerable | 2026-06-08 04:56:32.194398 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-5098 |
vulnerable | 2026-06-08 04:56:32.188480 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4068 |
vulnerable | 2026-06-08 04:55:18.752348 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3717 |
vulnerable | 2026-06-08 04:55:16.569070 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3716 |
vulnerable | 2026-06-08 04:55:16.568209 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3715 |
vulnerable | 2026-06-08 04:55:16.567383 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3714 |
vulnerable | 2026-06-08 04:55:16.559800 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-3659 |
vulnerable | 2026-06-08 04:55:16.151054 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3636 |
vulnerable | 2026-06-08 04:51:43.358202 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3635 |
vulnerable | 2026-06-08 04:51:43.356556 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3633 |
vulnerable | 2026-06-08 04:51:43.354455 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3632 |
vulnerable | 2026-06-08 04:51:43.352823 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3631 |
vulnerable | 2026-06-08 04:51:43.351524 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3630 |
vulnerable | 2026-06-08 04:51:43.349877 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3629 |
vulnerable | 2026-06-08 04:51:43.343643 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3628 |
vulnerable | 2026-06-08 04:51:43.337251 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.