Cross site scripting

2009-04-1022:00:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.4%

JSON

Cross-site scripting (XSS) vulnerability in TARGET-E WorldCup Bets (worldcup) 2.0.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

CPENameOperatorVersion
worldcupeq0.1.9
worldcupeq1.2.8
worldcupeq1.2.9
worldcupeq1.3.0
worldcupeq2.0.0

Name	Operator	Version
worldcup	eq	0.1.9
worldcup	eq	1.2.8
worldcup	eq	1.2.9
worldcup	eq	1.3.0
worldcup	eq	2.0.0

References

osvdb.org/46395

typo3.org/teams/security/security-bulletins/typo3-20080619-1/

www.securityfocus.com/bid/29826

exchange.xforce.ibmcloud.com/vulnerabilities/43214