{"id":"GHSA-xj84-6q8f-qg2r","aliases":["CVE-2005-4875"],"title":"TYPO3 Reveals Sensitive Information via Direct Request to `misc/phpcheck/`","description":"TYPO3 3.8.0 and earlier allows remote attackers to obtain sensitive information via a direct request to misc/phpcheck/, which invokes the phpinfo function and prints values of unspecified environment variables.","severity":"high","score":null,"published":"2022-05-01T02:31:34.000Z","modified":"2025-04-04T14:57:08.485Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"typo3/cms","ranges":[{"events":[{"introduced":"0"},{"fixed":"3.8.1"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["3.8.1"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2005-4875","https://exchange.xforce.ibmcloud.com/vulnerabilities/42457","https://github.com/TYPO3/typo3","https://web.archive.org/web/20080228231555/http://typo3.org/teams/security/security-bulletins/typo3-20050725-1","http://bugs.typo3.org/view.php?id=1250","http://typo3.org/teams/security/security-bulletins/typo3-20050725-1"],"sources":[{"name":"OSV","id":"GHSA-xj84-6q8f-qg2r","modified":"2025-04-04T14:57:08.485867Z","url":"https://osv.dev/vulnerability/GHSA-xj84-6q8f-qg2r"}],"assessments":[]}