Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-3636
HistoryNov 02, 2009 - 12:00 a.m.

CVE-2009-3636

2009-11-0200:00:00
ubuntu.com
ubuntu.com
12

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.003

Percentile

68.2%

Cross-site scripting (XSS) vulnerability in the Install Tool subcomponent
in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and
4.3.x before 4.3beta2 allows remote attackers to inject arbitrary web
script or HTML via unspecified parameters.

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.003

Percentile

68.2%