CVE-2009-0816

Опубликовано: 05 мар. 2009

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in the backend user interface in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 allow remote attackers to inject arbitrary web script or HTML via unspecified fields.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:typo3:typo3:4.0:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.0.6:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.0.7:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.0.8:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.0.9:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.0.10:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.0.11:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.1:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.1.1:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.1.2:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.1.3:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.1.4:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.1.5:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.1.6:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.1.7:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.1.8:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.1.9:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.2:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.2.3:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.2.4:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.2.5:*:*:*:*:*:*:*

EPSS

Процентиль: 52%

0.00285

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2009-0816

debian

почти 17 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in the backend use ...

GHSA-jg55-3q6h-2ccf

github

почти 4 года назад

Typo3 Backend XSS Vulnerability