Skip to content
OpenAdvisories
High DSA-2646-1 2 CVEs

typo3-src - several

Published Mar 15, 2013 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 typo3-src 4.3.9+dfsg1-1+squeeze8

Vulnerabilities 2

  • High 7.4
    CVE-2013-1842

    TYPO3 SQL injection vulnerability in the Extbase Framework

    SQL injection vulnerability in the Extbase Framework in TYPO3 4.5.x before 4.5.24, 4.6.x before 4.6.17, 4.7.x before 4.7.9, and 6.0.x before 6.0.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to "the Query Object …

    typo3/cms-core Packagist
  • Medium 5.3
    CVE-2013-1843

    TYPO3 Open redirect vulnerability in the Access tracking mechanism

    Open redirect vulnerability in the Access tracking mechanism in TYPO3 4.5.x before 4.5.24, 4.6.x before 4.6.17, 4.7.x before 4.7.9, and 6.0.x before 6.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspec…

    typo3/cms-core Packagist