CVE-2010-1153: vulnerability facts

CVE-2010-1153

This page contains facts from public vulnerability sources. Check the original advisory before updating.

PHP remote file inclusion vulnerability in the autoloader in TYPO3 4.3.x before 4.3.3 allows remote attackers to execute arbitrary PHP code via a URL in an input field associated with the className variable.

CVSS 9.3 · Critical · EPSS 1.2% · Fix available

Published: 2010-04-20T19:00:00.000Z
Updated: 2024-09-17T01:27:09.643Z

Stack: php

Affected products and versions

n/a
Versions
- n/a: Affected
No fix published
typo3/cms Packagist
Affected ranges
- ECOSYSTEM: ≥ 4.3.0, < 4.3.3
Update to 4.3.3

Original sources

http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-008/
http://marc.info/?l=oss-security&m=127092306209177&w=2
http://www.openwall.com/lists/oss-security/2010/04/12/1
https://nvd.nist.gov/vuln/detail/CVE-2010-1153

Check your server →

CVE-2010-1153

Affected products and versions

n/a

typo3/cms Packagist

Original sources