CVE-2015-8755

Multiple cross-site scripting (XSS) vulnerabilities in unspecified backend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allow remote authenticated editors to inject arbitrary web script or HTML via unknown vectors.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:typo3:typo3:7.6.1:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:7.6.0:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:7.5.0:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.2.10:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.2.10:rc1:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.2.9:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.2.8:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.2.0:beta3:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.2.0:beta2:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.2.0:beta1:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.2.0:alpha3:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.2.1:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:7.0.0:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.2.4:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:7.0.2:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.2.11:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.2.15:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:7.4.0:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.2.14:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.2.0:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:7.3.1:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:7.2.0:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.2.2:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.2.0:beta6:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.2.0:alpha2:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:7.3.0:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.2.0:rc2:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.2.12:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:7.1.0:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.2.6:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.2.13:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.2.0:beta4:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.2.0:rc1:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.2.5:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.2.3:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.2.0:beta7:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.2.0:alpha1:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.2.0:beta5:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:6.2.7:*:*:*:*:*:*:*

Information

Published : 2016-01-08 11:59

Updated : 2016-01-11 18:53


NVD link : CVE-2015-8755

Mitre link : CVE-2015-8755


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

typo3

  • typo3