Skip to content
OpenAdvisories
Unscored DSA-2445-1 3 CVEs

typo3-src - several

Published Mar 31, 2012 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 typo3-src 4.3.9+dfsg1-1+squeeze3

Vulnerabilities 3

  • Low —
    CVE-2012-1606

    Typo3 Backend XSS Vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in the Backend component in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allow remote authenticated backend users to inject arbitrary web script or HTML via unspecified…

    typo3/cms Packagist
  • Medium —
    CVE-2012-1607

    TYPO3 allows remote attackers to obtain the database name via a direct request

    The Command Line Interface (CLI) script in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to obtain the database name via a direct request.

    typo3/cms Packagist
  • Medium —
    CVE-2012-1608

    Typo3 API XSS Vulnerabilities

    The t3lib_div::RemoveXSS API method in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to bypass the cross-site scripting (XSS) protection mechanism and inject arbitrary web script or HTML via non pr…

    typo3/cms Packagist