GCVE - cpe:2.3:a:typo3:typo3:4.2.11:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:typo3:typo3:4.2.11:*:*:*:*:*:*:*

part: a version: 4.2.11 update: *

Vendor	Typo3 (`bebcd01c-0947-5641-89ed-9b814cca944e`)
Product	Typo3 (`e0e75c36-ce92-5448-bdce-8b59acd8c849`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/typo3/typo3`	purl2cpe	2026-06-01 10:16:08.660085
`pkg:typo3/typo3.cms.git`	purl2cpe	2026-06-01 10:16:08.660086

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-3945`	vulnerable	2026-06-08 05:05:43.515199	Details available The Authentication component in TYPO3 before 6.2, when salting for password hashing is disabled, does not require knowledge of the cleartext password if the password hash is known, which allows remote attackers to bypass authentication and gain access to the backend by leveraging knowledge of a password hash. Published: 2014-06-03T14:00:00.000Z Updated: 2024-08-06T10:57:17.942Z Open on db.gcve.eu Reference links http://www.debian.org/security/2014/dsa-2942 http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2014-001/ http://www.openwall.com/lists/oss-security/2014/06/03/2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-5104`	vulnerable	2026-06-08 04:56:32.204640	Details available The escapeStrForLike method in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 does not properly escape input when the MySQL database is set to sql_mode NO_BACKSLASH_ESCAPES, which allows remote attackers to obtain sensitive information via wildcard characters in a LIKE query. Published: 2012-05-21T20:00:00.000Z Updated: 2024-08-07T04:09:39.215Z Open on db.gcve.eu Reference links http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-022/ http://www.securityfocus.com/bid/45470 http://secunia.com/advisories/35770 http://www.openwall.com/lists/oss-security/2012/05/12/5 http://www.openwall.com/lists/oss-security/2011/01/13/2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-5103`	vulnerable	2026-06-08 04:56:32.203651	Details available SQL injection vulnerability in the list module in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors. Published: 2012-05-21T20:00:00.000Z Updated: 2024-08-07T04:09:38.910Z Open on db.gcve.eu Reference links http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-022/ http://www.securityfocus.com/bid/45470 http://secunia.com/advisories/35770 http://www.openwall.com/lists/oss-security/2012/05/12/5 http://www.openwall.com/lists/oss-security/2011/01/13/2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-5102`	vulnerable	2026-06-08 04:56:32.202652	Details available Directory traversal vulnerability in mod/tools/em/class.em_unzip.php in the unzip library in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote attackers to write arbitrary files via unspecified vectors. Published: 2012-05-21T20:00:00.000Z Updated: 2024-08-07T04:09:39.200Z Open on db.gcve.eu Reference links http://bugs.typo3.org/view.php?id=16362 http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-022/ http://www.osvdb.org/70119 http://www.securityfocus.com/bid/45470 https://exchange.xforce.ibmcloud.com/vulnerabilities/64180	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-5101`	vulnerable	2026-06-08 04:56:32.201574	Details available Directory traversal vulnerability in the TypoScript setup in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote authenticated administrators to read arbitrary files via unspecified vectors related to the "file inclusion functionality." Published: 2012-05-21T20:00:00.000Z Updated: 2024-08-07T04:09:39.109Z Open on db.gcve.eu Reference links http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-022/ http://www.osvdb.org/70119 http://www.securityfocus.com/bid/45470 https://exchange.xforce.ibmcloud.com/vulnerabilities/64180 http://secunia.com/advisories/35770	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-5100`	vulnerable	2026-06-08 04:56:32.200526	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-5099`	vulnerable	2026-06-08 04:56:32.194464	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-5098`	vulnerable	2026-06-08 04:56:32.190762	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4068`	vulnerable	2026-06-08 04:55:18.752414	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3717`	vulnerable	2026-06-08 04:55:16.569132	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3716`	vulnerable	2026-06-08 04:55:16.568272	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3715`	vulnerable	2026-06-08 04:55:16.567448	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3714`	vulnerable	2026-06-08 04:55:16.559868	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3659`	vulnerable	2026-06-08 04:55:16.153337	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.