High severityNVD Advisory· Published Dec 31, 2005· Updated Apr 16, 2026

CVE-2005-4875

Description

TYPO3 3.8.0 and earlier allows remote attackers to obtain sensitive information via a direct request to misc/phpcheck/, which invokes the phpinfo function and prints values of unspecified environment variables.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
typo3/cmsPackagist	< 3.8.1	3.8.1

Affected products

TYPO3/Typo33 versions
cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*range: <=3.8.0
- cpe:2.3:a:typo3:typo3:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:typo3:typo3:3.7.0:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

github.com/advisories/GHSA-xj84-6q8f-qg2rghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2005-4875ghsaADVISORY
bugs.typo3.org/view.phpnvdWEB
typo3.org/teams/security/security-bulletins/typo3-20050725-1ghsaWEB
exchange.xforce.ibmcloud.com/vulnerabilities/42457nvdWEB
web.archive.org/web/20080228231555/http://typo3.org/teams/security/security-bulletins/typo3-20050725-1ghsaWEB
typo3.org/teams/security/security-bulletins/typo3-20050725-1/nvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000