CVE-2010-3659
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 CMS 4.1.x before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4, and 4.4.x before 4.4.1 allow remote authenticated backend users to inject arbitrary web script or HTML via unspecified parameters to the extension manager, or unspecified parameters to unknown backend forms.
Múltiples vulnerabilidades de Cross-Site Scripting (XSS) en TYPO3 CMS en versiones 4.1.x anteriores a la 4.1.14, versiones 4.2.x anteriores a la 4.2.13, versiones 4.3.x anteriores a la 4.3.4 y versiones 4.4.x anteriores a la 4.4.1 permite que usuarios remotos backend inyecten scripts web o HTML arbitrarios mediante parámetros sin especificar en el gestor de extensiones, o parámetros sin especificar en formularios de backend desconocidos.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2010-09-28 CVE Reserved
- 2017-10-20 CVE Published
- 2023-03-13 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (5)
URL | Tag | Source |
---|---|---|
http://www.openwall.com/lists/oss-security/2010/09/28/8 | Mailing List | |
http://www.openwall.com/lists/oss-security/2014/02/12/8 | Mailing List | |
http://www.securityfocus.com/bid/42029 | Third Party Advisory | |
https://security-tracker.debian.org/tracker/CVE-2010-3659 | Third Party Advisory |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-012 | 2017-11-07 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Typo3 Search vendor "Typo3" | Typo3 Search vendor "Typo3" for product "Typo3" | 4.1.0 Search vendor "Typo3" for product "Typo3" and version "4.1.0" | - |
Affected
| ||||||
Typo3 Search vendor "Typo3" | Typo3 Search vendor "Typo3" for product "Typo3" | 4.1.1 Search vendor "Typo3" for product "Typo3" and version "4.1.1" | - |
Affected
| ||||||
Typo3 Search vendor "Typo3" | Typo3 Search vendor "Typo3" for product "Typo3" | 4.1.2 Search vendor "Typo3" for product "Typo3" and version "4.1.2" | - |
Affected
| ||||||
Typo3 Search vendor "Typo3" | Typo3 Search vendor "Typo3" for product "Typo3" | 4.1.3 Search vendor "Typo3" for product "Typo3" and version "4.1.3" | - |
Affected
| ||||||
Typo3 Search vendor "Typo3" | Typo3 Search vendor "Typo3" for product "Typo3" | 4.1.4 Search vendor "Typo3" for product "Typo3" and version "4.1.4" | - |
Affected
| ||||||
Typo3 Search vendor "Typo3" | Typo3 Search vendor "Typo3" for product "Typo3" | 4.1.5 Search vendor "Typo3" for product "Typo3" and version "4.1.5" | - |
Affected
| ||||||
Typo3 Search vendor "Typo3" | Typo3 Search vendor "Typo3" for product "Typo3" | 4.1.6 Search vendor "Typo3" for product "Typo3" and version "4.1.6" | - |
Affected
| ||||||
Typo3 Search vendor "Typo3" | Typo3 Search vendor "Typo3" for product "Typo3" | 4.1.7 Search vendor "Typo3" for product "Typo3" and version "4.1.7" | - |
Affected
| ||||||
Typo3 Search vendor "Typo3" | Typo3 Search vendor "Typo3" for product "Typo3" | 4.1.8 Search vendor "Typo3" for product "Typo3" and version "4.1.8" | - |
Affected
| ||||||
Typo3 Search vendor "Typo3" | Typo3 Search vendor "Typo3" for product "Typo3" | 4.1.9 Search vendor "Typo3" for product "Typo3" and version "4.1.9" | - |
Affected
| ||||||
Typo3 Search vendor "Typo3" | Typo3 Search vendor "Typo3" for product "Typo3" | 4.1.10 Search vendor "Typo3" for product "Typo3" and version "4.1.10" | - |
Affected
| ||||||
Typo3 Search vendor "Typo3" | Typo3 Search vendor "Typo3" for product "Typo3" | 4.1.11 Search vendor "Typo3" for product "Typo3" and version "4.1.11" | - |
Affected
| ||||||
Typo3 Search vendor "Typo3" | Typo3 Search vendor "Typo3" for product "Typo3" | 4.1.12 Search vendor "Typo3" for product "Typo3" and version "4.1.12" | - |
Affected
| ||||||
Typo3 Search vendor "Typo3" | Typo3 Search vendor "Typo3" for product "Typo3" | 4.1.13 Search vendor "Typo3" for product "Typo3" and version "4.1.13" | - |
Affected
| ||||||
Typo3 Search vendor "Typo3" | Typo3 Search vendor "Typo3" for product "Typo3" | 4.2.0 Search vendor "Typo3" for product "Typo3" and version "4.2.0" | - |
Affected
| ||||||
Typo3 Search vendor "Typo3" | Typo3 Search vendor "Typo3" for product "Typo3" | 4.2.1 Search vendor "Typo3" for product "Typo3" and version "4.2.1" | - |
Affected
| ||||||
Typo3 Search vendor "Typo3" | Typo3 Search vendor "Typo3" for product "Typo3" | 4.2.2 Search vendor "Typo3" for product "Typo3" and version "4.2.2" | - |
Affected
| ||||||
Typo3 Search vendor "Typo3" | Typo3 Search vendor "Typo3" for product "Typo3" | 4.2.3 Search vendor "Typo3" for product "Typo3" and version "4.2.3" | - |
Affected
| ||||||
Typo3 Search vendor "Typo3" | Typo3 Search vendor "Typo3" for product "Typo3" | 4.2.4 Search vendor "Typo3" for product "Typo3" and version "4.2.4" | - |
Affected
| ||||||
Typo3 Search vendor "Typo3" | Typo3 Search vendor "Typo3" for product "Typo3" | 4.2.5 Search vendor "Typo3" for product "Typo3" and version "4.2.5" | - |
Affected
| ||||||
Typo3 Search vendor "Typo3" | Typo3 Search vendor "Typo3" for product "Typo3" | 4.2.6 Search vendor "Typo3" for product "Typo3" and version "4.2.6" | - |
Affected
| ||||||
Typo3 Search vendor "Typo3" | Typo3 Search vendor "Typo3" for product "Typo3" | 4.2.7 Search vendor "Typo3" for product "Typo3" and version "4.2.7" | - |
Affected
| ||||||
Typo3 Search vendor "Typo3" | Typo3 Search vendor "Typo3" for product "Typo3" | 4.2.8 Search vendor "Typo3" for product "Typo3" and version "4.2.8" | - |
Affected
| ||||||
Typo3 Search vendor "Typo3" | Typo3 Search vendor "Typo3" for product "Typo3" | 4.2.9 Search vendor "Typo3" for product "Typo3" and version "4.2.9" | - |
Affected
| ||||||
Typo3 Search vendor "Typo3" | Typo3 Search vendor "Typo3" for product "Typo3" | 4.2.10 Search vendor "Typo3" for product "Typo3" and version "4.2.10" | - |
Affected
| ||||||
Typo3 Search vendor "Typo3" | Typo3 Search vendor "Typo3" for product "Typo3" | 4.2.11 Search vendor "Typo3" for product "Typo3" and version "4.2.11" | - |
Affected
| ||||||
Typo3 Search vendor "Typo3" | Typo3 Search vendor "Typo3" for product "Typo3" | 4.2.12 Search vendor "Typo3" for product "Typo3" and version "4.2.12" | - |
Affected
| ||||||
Typo3 Search vendor "Typo3" | Typo3 Search vendor "Typo3" for product "Typo3" | 4.3.0 Search vendor "Typo3" for product "Typo3" and version "4.3.0" | - |
Affected
| ||||||
Typo3 Search vendor "Typo3" | Typo3 Search vendor "Typo3" for product "Typo3" | 4.3.1 Search vendor "Typo3" for product "Typo3" and version "4.3.1" | - |
Affected
| ||||||
Typo3 Search vendor "Typo3" | Typo3 Search vendor "Typo3" for product "Typo3" | 4.3.2 Search vendor "Typo3" for product "Typo3" and version "4.3.2" | - |
Affected
| ||||||
Typo3 Search vendor "Typo3" | Typo3 Search vendor "Typo3" for product "Typo3" | 4.3.3 Search vendor "Typo3" for product "Typo3" and version "4.3.3" | - |
Affected
| ||||||
Typo3 Search vendor "Typo3" | Typo3 Search vendor "Typo3" for product "Typo3" | 4.4.0 Search vendor "Typo3" for product "Typo3" and version "4.4.0" | - |
Affected
|