NVD

Id
2616  
Name
CVE-2008-2718  
Description
Cross-site scripting (XSS) vulnerability in fe_adminlib.inc in TYPO3 4.0.x before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.2.1, as used in extensions such as (1) direct_mail_subscription, (2) feuser_admin, and (3) kb_md5fepw, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-06-16  
Modified Date
2011-03-07  
Seq
2008-2718  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
16470 2616 CVE-2008-2718 3945  View
16471 2616 CVE-2008-2718 http://typo3.org/teams/security/security-bulletins/typo3-20080611-1/  View
16472 2616 CVE-2008-2718 DSA-1596  View
16473 2616 CVE-2008-2718 20080611 TYPO3 Security Bulletin TYPO3-20080611-1: Multiple vulnerabilities in TYPO3 Core  View
16474 2616 CVE-2008-2718 29657  View
16475 2616 CVE-2008-2718 ADV-2008-1802  View
16476 2616 CVE-2008-2718 typo3-feadminlibinc-xss(42986)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50583 JVNDB-2008-005893 TYPO3 の fe_adminlib.inc におけるクロスサイトスクリプティングの脆弱性 (1) direct_mail_subscription、(2) feuser_admin、および (3) kb_md5fepw などのエクステンションで使用されている TYPO3 の fe_adminlib.inc には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-2718 32831 CVE-2008-2718 2616 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005893.html 2008-06-16 2012-12-20 View