| Package | Affected versions | Patched versions |
|---|---|---|
| typo3/cms | ≥ 4.5.0, < 4.5.21≥ 4.6.0, < 4.6.14≥ 4.7.0, < 4.7.6 | 4.5.214.6.144.7.6 |
| typo3 | = 4.5= 4.5.0= 4.5.1= 4.5.10= 4.5.11= 4.5.12= 4.5.13= 4.5.14= 4.5.15= 4.5.16= 4.5.17= 4.5.18= 4.5.19= 4.5.2= 4.5.20= 4.5.3= 4.5.4= 4.5.5= 4.5.6= 4.5.7= 4.5.8= 4.5.9= 4.6= 4.6.0= 4.6.1= 4.6.10= 4.6.11= 4.6.12= 4.6.13= 4.6.2= 4.6.3= 4.6.4= 4.6.5= 4.6.6= 4.6.7= 4.6.8= 4.6.9= 4.7= 4.7.0= 4.7.1= 4.7.2= 4.7.3= 4.7.4= 4.7.5 |
SQL injection vulnerability in the Backend History module in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 Due to missing encoding of user input, the history module is susceptible to SQL Injection and Cross-Site Scripting. A valid backend login is required to exploit this vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free