VYPR
← All advisories
High severityNVD Advisory· Published Apr 20, 2010· Updated Jun 16, 2026

CVE-2010-1153

CVE-2010-1153

Description

PHP remote file inclusion vulnerability in the autoloader in TYPO3 4.3.x before 4.3.3 allows remote attackers to execute arbitrary PHP code via a URL in an input field associated with the className variable.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
typo3/cmsPackagist
>= 4.3.0, < 4.3.34.3.3

Affected products

4
  • TYPO3/Typo33 versions
    cpe:2.3:a:typo3:typo3:4.3.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:typo3:typo3:4.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:typo3:typo3:4.3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:typo3:typo3:4.3.2:*:*:*:*:*:*:*
  • ghsa-coords
    pkg:composer/typo3/cms
    Range: >= 4.3.0, < 4.3.3

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.