VYPR
← All advisories
High severityNVD Advisory· Published Apr 20, 2010· Updated Apr 29, 2026

CVE-2010-1153

CVE-2010-1153

Description

PHP remote file inclusion vulnerability in the autoloader in TYPO3 4.3.x before 4.3.3 allows remote attackers to execute arbitrary PHP code via a URL in an input field associated with the className variable.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
typo3/cmsPackagist
>= 4.3.0, < 4.3.34.3.3

Affected products

3
  • TYPO3/Typo33 versions
    cpe:2.3:a:typo3:typo3:4.3.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:typo3:typo3:4.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:typo3:typo3:4.3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:typo3:typo3:4.3.2:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.