NVD

Id
40531  
Name
CVE-2013-5100  
Description
Cross-site scripting (XSS) vulnerability in the Static Methods since 2007 (div2007) extension before 0.10.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the t3lib_div::quoteJSvalue function.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-08-09  
Modified Date
2013-08-13  
Seq
2013-5100  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
205536 40531 CVE-2013-5100 http://typo3.org/extensions/repository/view/div2007  View
205537 40531 CVE-2013-5100 http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-001/  View
205538 40531 CVE-2013-5100 57288  View
205539 40531 CVE-2013-5100 typo3-staticmethods-unspecified-xss(81195)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22131 JVNDB-2013-003706 TYPO3 用 Static Methods since 2007 エクステンションにおけるクロスサイトスクリプティングの脆弱性 TYPO3 用 Static Methods since 2007 (div2007) エクステンションには、t3lib_div::quoteJSvalue 関数に関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2013-5100 65042 CVE-2013-5100 40531 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003706.html 2013-01-11 2013-08-13 View