CVE-2010-3659

Sažetak

Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 CMS 4.1.x before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4, and 4.4.x before 4.4.1 allow remote authenticated backend users to inject arbitrary web script or HTML via unspecified parameters to the extension manager, or unspecified parameters to unknown backend forms.

Reference

http://www.openwall.com/lists/oss-security/2010/09/28/8
http://www.openwall.com/lists/oss-security/2014/02/12/8
http://www.securityfocus.com/bid/42029
https://security-tracker.debian.org/tracker/CVE-2010-3659/
https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-012/

CVSS

Base:	3.5
Impact:	2.9
Exploitability:	6.8

Pristup

Vektor	Složenost	Autentikacija
NETWORK	MEDIUM	SINGLE

Impact

Povjerljivost	Cjelovitost	Dostupnost
NONE	PARTIAL	NONE

CVSS vektor

AV:N/AC:M/Au:S/C:N/I:P/A:N

Zadnje važnije ažuriranje

07-11-2017 - 20:14

Objavljeno

20-10-2017 - 18:29