CVE-2013-1842: SQL injection vulnerability in the Extbase Framework in TYPO3 4.5.x before 4.5.24, 4.6.x before 4.6.17, 4.7...

Security readout for executives and security teams

CVE-2013-1842 is a SQL injection flaw in TYPO3's Extbase Framework. A remote attacker could run arbitrary SQL against affected TYPO3 sites. Business risk is potential data exposure or manipulation on legacy TYPO3 deployments, especially public-facing websites that still run the named older branches. Exposure is most likely on internet-facing TYPO3 installations using the affected core branches and Extbase functionality. Current TYPO3 versions are not identified as affected in the provided sources. The bundle does not provide affected CPEs or extension-specific scope. Prioritize remediation for public-facing or data-bearing TYPO3 sites on the affected branches. The vulnerability is old, but legacy CMS systems often persist unnoticed, and SQL injection can create material data risk even without confirmed active exploitation. Mitigation focus: Upgrade TYPO3 to 4.5.24, 4.6.17, 4.7.9, 6.0.3, or later supported versions.; Apply Debian or openSUSE security packages where TYPO3 is managed through those distributions.; Check the TYPO3 security bulletin for any branch-specific remediation guidance..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.