CVE-2010-1153: PHP remote file inclusion vulnerability in the autoloader in TYPO3 4.3.x before 4.3.3 allows remote attackers to execute arbitrary PHP code via a URL in an…

PriorityP334medium6.8CVSS 2.0

AVNACMAuNCPIPAP

EPSS

1.16%

63.0th percentile

PHP remote file inclusion vulnerability in the autoloader in TYPO3 4.3.x before 4.3.3 allows remote attackers to execute arbitrary PHP code via a URL in an input field associated with the className variable.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
typo3	cms	>= 4.3.0 < 4.3.3	4.3.3
typo3	typo3	—	—
typo3	typo3	—	—
typo3	typo3	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.