CVE-2010-5098

Sažetak

Cross-site scripting (XSS) vulnerability in the FORM content object in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Reference

http://secunia.com/advisories/35770
http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-022/
http://www.openwall.com/lists/oss-security/2011/01/13/2
http://www.openwall.com/lists/oss-security/2012/05/10/7
http://www.openwall.com/lists/oss-security/2012/05/11/3
http://www.openwall.com/lists/oss-security/2012/05/12/5
http://www.osvdb.org/70122
http://www.securityfocus.com/bid/45470
https://exchange.xforce.ibmcloud.com/vulnerabilities/64179

CVSS

Base:	3.5
Impact:	2.9
Exploitability:	6.8

Pristup

Vektor	Složenost	Autentikacija
NETWORK	MEDIUM	SINGLE

Impact

Povjerljivost	Cjelovitost	Dostupnost
NONE	PARTIAL	NONE

CVSS vektor

AV:N/AC:M/Au:S/C:N/I:P/A:N

Zadnje važnije ažuriranje

29-08-2017 - 01:29

Objavljeno

21-05-2012 - 20:55