CVEvulnerability
CVE-2009-3634
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-11-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the Frontend Login Box (aka felogin) subcomponent in TYPO3 4.2.0 through 4.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
Affected configurations
• typo3 typo3 4.2.0
• typo3 typo3 4.2.1
• typo3 typo3 4.2.2
• typo3 typo3 4.2.4
• typo3 typo3 4.2.5
• typo3 typo3 4.2.6
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://marc.info/?l=oss-security&m=125632856206736&w=2 marc.info
- http://marc.info/?l=oss-security&m=125633199111438&w=2 marc.info
- http://secunia.com/advisories/37122 Vendor Advisory
- http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/ Patch, Vendor Advisory
- http://www.securityfocus.com/bid/36801 Patch
- http://www.vupen.com/english/advisories/2009/3009 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53926 exchange.xforce.ibmcloud.com
- http://marc.info/?l=oss-security&m=125632856206736&w=2 marc.info
- http://marc.info/?l=oss-security&m=125633199111438&w=2 marc.info
- http://secunia.com/advisories/37122 Vendor Advisory
- http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/ Patch, Vendor Advisory
- http://www.securityfocus.com/bid/36801 Patch
- http://www.vupen.com/english/advisories/2009/3009 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53926 exchange.xforce.ibmcloud.com