CVE-2008-6687

Cross-site scripting (XSS) vulnerability in DCD GoogleMap (dcdgooglemap) 1.1.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*
OR cpe:2.3:a:david_cadu:dcdgooglemap:*:*:*:*:*:*:*:*
cpe:2.3:a:david_cadu:dcdgooglemap:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:david_cadu:dcdgooglemap:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:david_cadu:dcdgooglemap:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:david_cadu:dcdgooglemap:1.1.1:*:*:*:*:*:*:*

History

21 Nov 2024, 00:57

Type Values Removed Values Added
References () http://osvdb.org/46378 - () http://osvdb.org/46378 -
References () http://osvdb.org/46384 - () http://osvdb.org/46384 -
References () http://secunia.com/advisories/30773 - () http://secunia.com/advisories/30773 -
References () http://typo3.org/extensions/repository/view/dcdgooglemap/1.1.1/ - () http://typo3.org/extensions/repository/view/dcdgooglemap/1.1.1/ -
References () http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/ - Patch, Vendor Advisory () http://typo3.org/teams/security/security-bulletins/typo3-20080619-1/ - Patch, Vendor Advisory
References () http://www.securityfocus.com/bid/29815 - () http://www.securityfocus.com/bid/29815 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/43199 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/43199 -

Information

Published : 2009-04-10 22:00

Updated : 2024-11-21 00:57


NVD link : CVE-2008-6687

Mitre link : CVE-2008-6687

CVE.ORG link : CVE-2008-6687


JSON object : View

Products Affected

david_cadu

  • dcdgooglemap

typo3

  • typo3
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')