Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2010-3659

Опубликовано: 20 окт. 2017
Источник: nvd
CVSS3: 5.4
CVSS2: 3.5
EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 CMS 4.1.x before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4, and 4.4.x before 4.4.1 allow remote authenticated backend users to inject arbitrary web script or HTML via unspecified parameters to the extension manager, or unspecified parameters to unknown backend forms.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:typo3:typo3:4.1.0:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.1.1:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.1.2:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.1.3:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.1.4:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.1.5:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.1.6:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.1.7:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.1.8:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.1.9:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.1.10:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.1.11:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.1.12:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.1.13:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.2.0:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.2.1:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.2.2:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.2.3:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.2.4:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.2.5:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.2.6:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.2.7:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.2.8:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.2.9:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.2.10:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.2.11:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.2.12:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.3.0:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.3.1:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.3.2:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.3.3:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.4.0:*:*:*:*:*:*:*

EPSS

Процентиль: 49%
0.00258
Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

ubuntu логотип

CVE-2010-3659

CVSS3: 5.4
ubuntu
больше 8 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 CMS 4.1.x before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4, and 4.4.x before 4.4.1 allow remote authenticated backend users to inject arbitrary web script or HTML via unspecified parameters to the extension manager, or unspecified parameters to unknown backend forms.

debian логотип

CVE-2010-3659

CVSS3: 5.4
debian
больше 8 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 CMS 4.1.x ...

github логотип

GHSA-jr79-65xr-q7cx

CVSS3: 5.4
github
больше 3 лет назад

TYPO3 Cross-site Scripting vulnerability in the extension manager and backend forms

EPSS

Процентиль: 49%
0.00258
Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79