Cross-site scripting (XSS) vulnerability in the file backend module in TYPO3 4.2.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
typo3.org/teams/security/security-bulletins/typo3-20081113-1
exchange.xforce.ibmcloud.com/vulnerabilities/46585
github.com/TYPO3-CMS/backend
nvd.nist.gov/vuln/detail/CVE-2008-5644
web.archive.org/web/20111229084039/secunia.com/advisories/32689
web.archive.org/web/20200301075354/www.securityfocus.com/bid/32284