Description

Cross-site scripting (XSS) vulnerability in the Frontend Login Box (aka felogin) subcomponent in TYPO3 4.2.0 through 4.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

Remediation

References

CVE-2009-3634

Related Vulnerabilities

WordPress Plugin Post Thumbnail Editor Multiple Cross-Site Request Forgery Vulnerabilities (2.4.1)

Dotclear Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-0933)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2009-4299)

MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-8286)

Squid Operation on a Resource after Expiration or Release Vulnerability (CVE-2024-23638)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2009-3634