Approved changes feed: RSS · Atom

cpe:2.3:a:typo3:typo3:4.3.3:*:*:*:*:*:*:*

part: a version: 4.3.3 update: *

VendorTypo3 (bebcd01c-0947-5641-89ed-9b814cca944e)
ProductTypo3 (e0e75c36-ce92-5448-bdce-8b59acd8c849)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/typo3/typo3 purl2cpe 2026-06-01 10:16:08.660149
pkg:typo3/typo3.cms.git purl2cpe 2026-06-01 10:16:08.660150

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-2047 vulnerable 2026-06-08 05:06:27.310429 Details available
The rsaauth extension in TYPO3 4.3.0 through 4.3.14, 4.4.0 through 4.4.15, 4.5.0 through 4.5.39, and 4.6.0 through 4.6.18, when configured for the frontend, allows remote attackers to bypass authentication via a password that is casted to an empty value.
Published: 2015-02-23T17:00:00.000Z
Updated: 2024-08-06T05:02:42.990Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3945 vulnerable 2026-06-08 05:05:43.522530 Details available
The Authentication component in TYPO3 before 6.2, when salting for password hashing is disabled, does not require knowledge of the cleartext password if the password hash is known, which allows remote attackers to bypass authentication and gain access to the backend by leveraging knowledge of a password hash.
Published: 2014-06-03T14:00:00.000Z
Updated: 2024-08-06T10:57:17.942Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5104 vulnerable 2026-06-08 04:56:32.204769 Details available
The escapeStrForLike method in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 does not properly escape input when the MySQL database is set to sql_mode NO_BACKSLASH_ESCAPES, which allows remote attackers to obtain sensitive information via wildcard characters in a LIKE query.
Published: 2012-05-21T20:00:00.000Z
Updated: 2024-08-07T04:09:39.215Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5103 vulnerable 2026-06-08 04:56:32.203777 Details available
SQL injection vulnerability in the list module in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors.
Published: 2012-05-21T20:00:00.000Z
Updated: 2024-08-07T04:09:38.910Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5102 vulnerable 2026-06-08 04:56:32.202783 Details available
Directory traversal vulnerability in mod/tools/em/class.em_unzip.php in the unzip library in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote attackers to write arbitrary files via unspecified vectors.
Published: 2012-05-21T20:00:00.000Z
Updated: 2024-08-07T04:09:39.200Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5101 vulnerable 2026-06-08 04:56:32.201701 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5100 vulnerable 2026-06-08 04:56:32.200671 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5099 vulnerable 2026-06-08 04:56:32.194591 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5098 vulnerable 2026-06-08 04:56:32.193435 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5097 vulnerable 2026-06-08 04:56:32.175497 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4068 vulnerable 2026-06-08 04:55:18.752639 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3717 vulnerable 2026-06-08 04:55:16.569253 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3716 vulnerable 2026-06-08 04:55:16.568389 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3715 vulnerable 2026-06-08 04:55:16.567566 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3714 vulnerable 2026-06-08 04:55:16.562736 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3659 vulnerable 2026-06-08 04:55:16.156505 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.