CVE-2009-4159

Cross-site scripting (XSS) vulnerability in the newsletter configuration feature in the backend module in the Direct Mail (direct_mail) extension 2.6.4 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:ivan_kartolo:direct_mail:2.6.3:*:*:*:*:*:*:*
cpe:2.3:a:ivan_kartolo:direct_mail:2.6.2:*:*:*:*:*:*:*
cpe:2.3:a:ivan_kartolo:direct_mail:2.6.1:*:*:*:*:*:*:*
cpe:2.3:a:ivan_kartolo:direct_mail:2.6.0:*:*:*:*:*:*:*
cpe:2.3:a:ivan_kartolo:direct_mail:*:*:*:*:*:*:*:*
cpe:2.3:a:ivan_kartolo:direct_mail:2.5.0:*:*:*:*:*:*:*
cpe:2.3:a:ivan_kartolo:direct_mail:2.1.2:*:*:*:*:*:*:*
cpe:2.3:a:ivan_kartolo:direct_mail:2.1.4:*:*:*:*:*:*:*
cpe:2.3:a:ivan_kartolo:direct_mail:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ivan_kartolo:direct_mail:2.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ivan_kartolo:direct_mail:2.1.5:*:*:*:*:*:*:*
cpe:2.3:a:ivan_kartolo:direct_mail:2.1.1:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*

Information

Published : 2009-12-02 09:30

Updated : 2009-12-07 21:00


NVD link : CVE-2009-4159

Mitre link : CVE-2009-4159


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

typo3

  • typo3

ivan_kartolo

  • direct_mail