Skip to content
OpenAdvisories
Unscored DSA-2574-1 4 CVEs

typo3-src - several

Published Nov 15, 2012 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 typo3-src 4.3.9+dfsg1-1+squeeze7

Vulnerabilities 4

  • Medium —
    CVE-2012-6144

    Typo3 Backend History Module Vulnerable to SQL Injection

    SQL injection vulnerability in the Backend History module in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 allows remote authenticated backend users to execute arbitrary SQL commands via unspecified vectors.

    typo3/cms Packagist
  • Low —
    CVE-2012-6145

    Typo3 Backend History Module Vulnerable to XSS

    Cross-site scripting (XSS) vulnerability in the Backend History module in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 allows remote authenticated backend users to inject arbitrary web script or HTML via unspecified vectors.

    typo3/cms Packagist
  • Medium —
    CVE-2012-6146

    Typo3 Backend History Module Vulnerable to XSS

    The Backend History Module in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 does not properly restrict access, which allows remote authenticated editors to read the history of arbitrary records via a crafted URL.

    typo3/cms Packagist
  • Low —
    CVE-2012-6147

    Typo3 Backend API XSS Vulnerability

    Cross-site scripting (XSS) vulnerability in the tree render API (TCA-Tree) in the Backend API in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 allows remote authenticated backend users to inject arbitrary web script or HTML via unspec…

    typo3/cms Packagist