CVE-2010-5097

Description

Cross-site scripting (XSS) vulnerability in the click enlarge functionality in TYPO3 4.3.x before 4.3.9 and 4.4.x before 4.4.5 when the caching framework is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/64178

http://www.securityfocus.com/bid/45470

http://www.osvdb.org/70123

http://www.openwall.com/lists/oss-security/2012/05/12/5

http://www.openwall.com/lists/oss-security/2012/05/11/3

http://www.openwall.com/lists/oss-security/2012/05/10/7

http://www.openwall.com/lists/oss-security/2011/01/13/2

http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-022/

http://secunia.com/advisories/35770

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS