CVE-2008-2718: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in feadminlib.inc in TYPO3 4.0.x before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.2.1, as used in extensions such as 1 directmailsubscription, 2 feuseradmin, and 3 kbmd5fepw, allows remote attackers to inject arbitrary web script or HTML via unspecified...