--- title: "TYPO3-CORE-SA-2012-005: Several Vulnerabilities in TYPO3 Core" url: "https://news.typo3.com/security/advisory/typo3-core-sa-2012-005" description: It has been discovered that TYPO3 Core is vulnerable to SQL Injection, Information Disclosure and Cross-Site Scripting image: "https://news.typo3.com/_assets/d1e01514e4c4a5b3147940fa2ec50682/Images/og-image-news.jpg" date: 2026-06-11 modified: 2026-06-11 categories: - "Product Updates & Roadmap" - TYPO3 CMS --- # TYPO3-CORE-SA-2012-005: Several Vulnerabilities in TYPO3 Core - [Product Updates & Roadmap](https://news.typo3.com/article/category/product-updates-roadmap) - Security / [TYPO3 CMS](https://news.typo3.com/article/category/security/typo3-cms) TYPO3-CORE-SA-2012-005: Several Vulnerabilities in TYPO3 Core ============================================================= 08 November 2012 ![A laptop screen displaying a list of security advisories](https://news.typo3.com/typo3temp/assets/_processed_/d/c/csm_security_blog_default_77f8e86036.webp) It has been discovered that TYPO3 Core is vulnerable to SQL Injection, Information Disclosure and Cross-Site Scripting - ![](https://news.typo3.com/typo3temp/assets/t3g/blog/gravatar/7569d41262328e5ed8d27b53e03970ec.png)[Helmut Hummel](https://news.typo3.com/article/author/helmut-hummel) **Component Type:** TYPO3 Core **Affected Versions:** 4.5.0 up to 4.5.20, 4.6.0 up to 4.6.13, 4.7.0 up to 4.7.5 and development releases of the 6.0 branch. **Vulnerability Types:** SQL Injection, Cross-Site Scripting, Information Disclosure **Overall Severity:** Medium **Release Date:** November 8, 2012 Vulnerable subcomponent: TYPO3 Backend History Module ----------------------------------------------------- **Vulnerability Type:** SQL Injection, Cross-Site Scripting **Severity:** Medium **Suggested CVSS v2.0:** [AV:N/AC:M/Au:S/C:C/I:C/A:N/E:F/RL:O/RC:C](http://jvnrss.ise.chuo-u.ac.jp/jtg/cvss/cvss2.cgi?vector=%28AV:N/AC:M/Au:S/C:C/I:C/A:N/E:F/RL:O/RC:C%29&g=3&lang=en "CVSS calculator") ([What's that?](http://buzz.typo3.org/teams/security/article/use-of-common-vulnerability-scoring-system-in-typo3-security-advisories/ "Blog post on CVSS usage")) **CVEs:** CVE-2012-6144, CVE-2012-6145 **Problem Description:** Due to missing encoding of user input, the history module is susceptible to SQL Injection and Cross-Site Scripting. A valid backend login is required to exploit this vulnerability. **Solution:** Update to the TYPO3 version 4.5.21, 4.6.14 or 4.7.6 that fix the problem described! **Credits:** Credits go to Thomas Worm who discovered and reported the issue. Vulnerable subcomponent: TYPO3 Backend History Module ----------------------------------------------------- **Vulnerability Type:** Information Disclosure **Severity:** Low **Suggested CVSS v2.0:** [AV:N/AC:L/Au:S/C:P/I:N/A:N/E:F/RL:O/RC:C](http://jvnrss.ise.chuo-u.ac.jp/jtg/cvss/cvss2.cgi?vector=%28AV:N/AC:L/Au:S/C:P/I:N/A:N/E:F/RL:O/RC:C%29&g=3&lang=en "CVSS calculator") ([What's that?](http://buzz.typo3.org/teams/security/article/use-of-common-vulnerability-scoring-system-in-typo3-security-advisories/ "Blog post on CVSS usage")) **CVE:** CVE-2012-6146 **Problem Description:** Due to a missing access check, regular editors could see the history view of arbitrary records, only by forging a proper URL for the History Module. A valid backend login is required to exploit this vulnerability. **Solution:** Update to the TYPO3 version 4.5.21, 4.6.14 or 4.7.6 that fix the problem described! **Credits:** Credits go to Core Team Member Oliver Hader who discovered and fixed the issue. Vulnerable subcomponent: TYPO3 Backend API ------------------------------------------ **Vulnerability Type:** Cross-Site Scripting **Severity:** Low **Suggested CVSS v2.0:** [AV:N/AC:M/Au:S/C:N/I:P/A:N/E:F/RL:O/RC:C](http://jvnrss.ise.chuo-u.ac.jp/jtg/cvss/cvss2.cgi?vector=%28AV:N/AC:M/Au:S/C:N/I:P/A:N/E:F/RL:O/RC:C%29&g=3&lang=en "CVSS calculator") ([What's that?](http://buzz.typo3.org/teams/security/article/use-of-common-vulnerability-scoring-system-in-typo3-security-advisories/ "Blog post on CVSS usage")) **CVEs:** CVE-2012-6147, CVE-2012-6148 **Problem Description:** Failing to properly HTML-encode user input the tree render API (TCA-Tree) is susceptible to Cross-Site Scripting. TYPO3 Versions below 6.0 does not make us of this API, thus is not exploitable, if no third party extension is installed which uses this API. A valid backend login is required to exploit this vulnerability. **Solution:** Update to the TYPO3 version 4.5.21, 4.6.14 or 4.7.6 that fix the problem described! **Credits:** Credits go to Johannes Feustel who discovered and reported the issue. Vulnerable subcomponent: TYPO3 Backend API ------------------------------------------ **Vulnerability Type:** Cross-Site Scripting **Severity:** Low **Suggested CVSS v2.0:** [AV:N/AC:M/Au:S/C:N/I:P/A:N/E:P/RL:O/RC:C](http://jvnrss.ise.chuo-u.ac.jp/jtg/cvss/cvss2.cgi?vector=%28AV:N/AC:M/Au:S/C:N/I:P/A:N/E:P/RL:O/RC:C%29&g=3&lang=en "CVSS calculator") ([What's that?](http://buzz.typo3.org/teams/security/article/use-of-common-vulnerability-scoring-system-in-typo3-security-advisories/ "Blog post on CVSS usage")) **Problem Description:** Failing to properly encode user input, the function menu API is susceptible to Cross-Site Scripting. A valid backend login is required to exploit this vulnerability. **Solution:** Update to the TYPO3 version 4.5.21, 4.6.14 or 4.7.6 that fix the problem described! **Credits:** Credits go to Richard Brain who discovered and reported the issue. **General Advice:** Follow the recommendations that are given in the [TYPO3 Security Guide](http://typo3.org/documentation/document-library/extension-manuals/doc_guide_security/current/ "Opens external link in new window"). Please subscribe to the typo3-announce mailing list. ![](https://news.typo3.com/typo3temp/assets/t3g/blog/gravatar/bb9efc51bced8582e7b8c235f4b5f2b5.png) About the Author [Helmut Hummel](https://news.typo3.com/article/author/helmut-hummel) [More posts by this author](https://news.typo3.com/article/author/helmut-hummel)