CVE-2012-1606 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2012-1606

Modified

More Info Official Page

Source-secalert@redhat.com

Published At-04 Sep, 2012 | 20:55

Updated At-29 Apr, 2026 | 01:13

Multiple cross-site scripting (XSS) vulnerabilities in the Backend component in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allow remote authenticated backend users to inject arbitrary web script or HTML via unspecified vectors.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	3.5	LOW	AV:N/AC:M/Au:S/C:N/I:P/A:N

Type: Primary

Version: 2.0

Base score: 3.5

Base severity: LOW

Vector:

AV:N/AC:M/Au:S/C:N/I:P/A:N

CPE Matches

TYPO3 Association

>>typo3>>4.4.0

cpe:2.3:a:typo3:typo3:4.4.0:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.4.1

cpe:2.3:a:typo3:typo3:4.4.1:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.4.2

cpe:2.3:a:typo3:typo3:4.4.2:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.4.3

cpe:2.3:a:typo3:typo3:4.4.3:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.4.4

cpe:2.3:a:typo3:typo3:4.4.4:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.4.5

cpe:2.3:a:typo3:typo3:4.4.5:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.4.6

cpe:2.3:a:typo3:typo3:4.4.6:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.4.7

cpe:2.3:a:typo3:typo3:4.4.7:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.4.8

cpe:2.3:a:typo3:typo3:4.4.8:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.4.9

cpe:2.3:a:typo3:typo3:4.4.9:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.4.10

cpe:2.3:a:typo3:typo3:4.4.10:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.4.11

cpe:2.3:a:typo3:typo3:4.4.11:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.4.12

cpe:2.3:a:typo3:typo3:4.4.12:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.4.13

cpe:2.3:a:typo3:typo3:4.4.13:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.5.0

cpe:2.3:a:typo3:typo3:4.5.0:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.5.1

cpe:2.3:a:typo3:typo3:4.5.1:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.5.2

cpe:2.3:a:typo3:typo3:4.5.2:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.5.3

cpe:2.3:a:typo3:typo3:4.5.3:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.5.4

cpe:2.3:a:typo3:typo3:4.5.4:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.5.5

cpe:2.3:a:typo3:typo3:4.5.5:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.5.6

cpe:2.3:a:typo3:typo3:4.5.6:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.5.7

cpe:2.3:a:typo3:typo3:4.5.7:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.5.8

cpe:2.3:a:typo3:typo3:4.5.8:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.5.9

cpe:2.3:a:typo3:typo3:4.5.9:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.5.10

cpe:2.3:a:typo3:typo3:4.5.10:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.5.11

cpe:2.3:a:typo3:typo3:4.5.11:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.5.12

cpe:2.3:a:typo3:typo3:4.5.12:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.5.13

cpe:2.3:a:typo3:typo3:4.5.13:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.6.0

cpe:2.3:a:typo3:typo3:4.6.0:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.6.1

cpe:2.3:a:typo3:typo3:4.6.1:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.6.2

cpe:2.3:a:typo3:typo3:4.6.2:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.6.3

cpe:2.3:a:typo3:typo3:4.6.3:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.6.4

cpe:2.3:a:typo3:typo3:4.6.4:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.6.5

cpe:2.3:a:typo3:typo3:4.6.5:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.6.6

cpe:2.3:a:typo3:typo3:4.6.6:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>4.7

cpe:2.3:a:typo3:typo3:4.7:*:*:*:*:*:*:*

TYPO3 Association

>>typo3>>6.0

cpe:2.3:a:typo3:typo3:6.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-79	Primary	nvd@nist.gov

CWE ID: CWE-79

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://osvdb.org/80760	secalert@redhat.com	N/A
http://secunia.com/advisories/48622	secalert@redhat.com	Vendor Advisory
http://secunia.com/advisories/48647	secalert@redhat.com	Vendor Advisory
http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-001/	secalert@redhat.com	Vendor Advisory
http://www.debian.org/security/2012/dsa-2445	secalert@redhat.com	N/A
http://www.openwall.com/lists/oss-security/2012/03/30/4	secalert@redhat.com	N/A
http://www.securityfocus.com/bid/52771	secalert@redhat.com	N/A
http://osvdb.org/80760	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/48622	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://secunia.com/advisories/48647	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-001/	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.debian.org/security/2012/dsa-2445	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.openwall.com/lists/oss-security/2012/03/30/4	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/52771	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://osvdb.org/80760

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://secunia.com/advisories/48622

Source: secalert@redhat.com

Resource:

Vendor Advisory

Hyperlink: http://secunia.com/advisories/48647

Source: secalert@redhat.com

Resource:

Vendor Advisory

Hyperlink: http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-001/

Source: secalert@redhat.com

Resource:

Vendor Advisory

Hyperlink: http://www.debian.org/security/2012/dsa-2445

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://www.openwall.com/lists/oss-security/2012/03/30/4

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/52771

Source: secalert@redhat.com

Resource: N/A

Hyperlink: http://osvdb.org/80760

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://secunia.com/advisories/48622

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://secunia.com/advisories/48647

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-001/

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://www.debian.org/security/2012/dsa-2445

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.openwall.com/lists/oss-security/2012/03/30/4

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/52771

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A