Description

Cross-site scripting (XSS) vulnerability in the file backend module in TYPO3 4.2.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

Remediation

References

CVE-2008-5644

Related Vulnerabilities

CubeCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-34018)

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-15110)

WordPress Plugin Browser Rejector Remote File Inclusion (2.10)

WordPress Plugin Simple 301 Redirects by BetterLinks Multiple Security Bypass Vulnerabilities (2.0.3)

Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-14820)

Severity

Medium

Classification

CVE-2008-5644 CWE-707

Tags

Missing Update Known Vulnerabilities