Vulnerability Database

296,747

Total vulnerabilities in the database

CVE-2005-4875

TYPO3 3.8.0 and earlier allows remote attackers to obtain sensitive information via a direct request to misc/phpcheck/, which invokes the phpinfo function and prints values of unspecified environment variables.

Published: Dec 31, 2005
Updated: Apr 13, 2023
CVE: CVE-2005-4875
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

CWE-200

Affected Software
References

Software	From	Fixed in
typo3 / typo3	1.1	1.1.x
typo3 / typo3	3.7.0	3.7.0.x
typo3 / typo3	-	3.8.0.x

http://bugs.typo3.org/view.php?id=1250
http://typo3.org/teams/security/security-bulletins/typo3-20050725-1/
https://exchange.xforce.ibmcloud.com/vulnerabilities/42457

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo