Composer · packagist.org
typo3/cms
Php Base64 Eval Chain: base64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload.
Why PkgRadar flagged v14.3.3
| Severity | Signal | Evidence |
|---|---|---|
| high | Php Base64 Eval Chain | base64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload. · TYPO3-typo3-e16ec78/typo3/sysext/core/Classes/Utility/GeneralUtility.php |
| high | Php Base64 Eval Chain | base64/gz/hex decode combined with eval/exec/backticks — classic PHP obfuscated payload. · TYPO3-typo3-e16ec78/typo3/sysext/form/Classes/Domain/Runtime/FormRuntime.php |
| high | Php Backtick With Decode | Backtick shell-out combined with base64/hex decode. · TYPO3-typo3-e16ec78/typo3/sysext/core/Classes/Utility/GeneralUtility.php |
| high | Php Backtick With Decode | Backtick shell-out combined with base64/hex decode. · TYPO3-typo3-e16ec78/typo3/sysext/form/Classes/Domain/Runtime/FormRuntime.php |
| medium | Remote Payload | matched "cUrl " · TYPO3-typo3-e16ec78/typo3/sysext/backend/Classes/Backend/Avatar/DefaultAvatarProvider.php |
| medium | Remote Payload | matched "cUrl " · TYPO3-typo3-e16ec78/typo3/sysext/core/Classes/Imaging/ImageResource.php |
| medium | Remote Payload | matched "cUrl " · TYPO3-typo3-e16ec78/typo3/sysext/core/Classes/Resource/Driver/LocalDriver.php |
| medium | Remote Payload | matched "cUrl " · TYPO3-typo3-e16ec78/typo3/sysext/core/Classes/Resource/Event/GeneratePublicUrlForResourceEvent.php |
| medium | Remote Payload | matched "cUrl " · TYPO3-typo3-e16ec78/typo3/sysext/core/Classes/Resource/ResourceStorage.php |
| medium | Remote Payload | matched "cUrl " · TYPO3-typo3-e16ec78/typo3/sysext/core/Classes/SystemResource/Publishing/DefaultSystemResourceUriGenerator.php |
| medium | Remote Payload | matched "cURL " · TYPO3-typo3-e16ec78/typo3/sysext/extensionmanager/Classes/Remote/TerExtensionRemote.php |
| medium | Remote Payload | matched "cUrl " · TYPO3-typo3-e16ec78/typo3/sysext/fluid/Classes/ViewHelpers/Link/FileViewHelper.php |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v14.3.3 | Review | 59 | 2026-06-09 |
Block this in CI
pkgradar gate --ecosystem composer typo3/[email protected]