medium4.3
CVE-2009-2104
Cross-site scripting (XSS) vulnerability in the Modern Guestbook / Commenting System (ve_guestbook) extension 2.7.1 and earlier for TYPO3 allows remote attacke…
Impact
Cross-site scripting (XSS) vulnerability in the Modern Guestbook / Commenting System (ve_guestbook) extension 2.7.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Udo Von Eynern | Modern Guest Book Commenting System | through 2.5.1 through 2.5.2 through 2.5.3 through 2.7.0 through 2.7.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/55122
- http://secunia.com/advisories/35483
- http://typo3.org/extensions/repository/view/ve_guestbook/2.7.2/
- http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-009/
- http://www.securityfocus.com/bid/35397
- http://osvdb.org/55122
- http://secunia.com/advisories/35483
- http://typo3.org/extensions/repository/view/ve_guestbook/2.7.2/
- http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-009/
- http://www.securityfocus.com/bid/35397