CVE-2012-6144
Summary
| CVE | CVE-2012-6144 |
|---|---|
| State | PUBLISHED |
| Assigner | redhat |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2013-07-01 21:55:01 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | SQL injection vulnerability in the Backend History module in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 allows remote authenticated backend users to execute arbitrary SQL commands via unspecified vectors. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
SingleConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:N/AC:L/Au:S/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Typo3 | Typo3 | 4.5 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.0 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.1 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.10 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.11 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.12 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.13 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.14 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.15 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.16 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.17 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.18 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.19 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.2 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.20 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.3 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.4 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.5 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.6 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.7 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.8 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.9 | All | All | All |
| Application | Typo3 | Typo3 | 4.6 | All | All | All |
| Application | Typo3 | Typo3 | 4.6.0 | All | All | All |
| Application | Typo3 | Typo3 | 4.6.1 | All | All | All |
| Application | Typo3 | Typo3 | 4.6.10 | All | All | All |
| Application | Typo3 | Typo3 | 4.6.11 | All | All | All |
| Application | Typo3 | Typo3 | 4.6.12 | All | All | All |
| Application | Typo3 | Typo3 | 4.6.13 | All | All | All |
| Application | Typo3 | Typo3 | 4.6.2 | All | All | All |
| Application | Typo3 | Typo3 | 4.6.3 | All | All | All |
| Application | Typo3 | Typo3 | 4.6.4 | All | All | All |
| Application | Typo3 | Typo3 | 4.6.5 | All | All | All |
| Application | Typo3 | Typo3 | 4.6.6 | All | All | All |
| Application | Typo3 | Typo3 | 4.6.7 | All | All | All |
| Application | Typo3 | Typo3 | 4.6.8 | All | All | All |
| Application | Typo3 | Typo3 | 4.6.9 | All | All | All |
| Application | Typo3 | Typo3 | 4.7 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.0 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.1 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.2 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.3 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.4 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.5 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| Several Vulnerabilities in TYPO3 Core - TYPO3 - The Enterprise Open Source CMS | af854a3a-2127-422b-91ae-364da2661108 | typo3.org | Vendor Advisory |
| osvdb.org/87115 | af854a3a-2127-422b-91ae-364da2661108 | osvdb.org | |
| oss-security - Re: Re: [Ticket#2012111110000015] TYPO3-CORE-SA-2012-005: Several Vulnerabilities in TYPO3 Core | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 996683 PHP (Composer) Security Update for typo3/cms (GHSA-947m-vgqc-x6v4)