TYPO3 versions 3.x, 4.0 through 4.0.7, 4.1 through 4.1.6, and 4.2 suffer from arbitrary code execution and code execution vulnerabilities.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/67188/typo3-xssexec.txt
Source: https://packetstormsecurity.com/files/67188/typo3-xssexec.txt.html