CVE-2008-6144 - Multiple cross-site scripting (XSS) vulnerabilities in the WEC Discussion Forum (wec_discussion) extension 1.7.0 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-3029

Back Back to CVE browser

MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in the WEC Discussion Forum (wec_discussion) extension 1.7.0 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-3029

Published Feb 16, 2009

4.3

MEDIUM

CVSS 2.0

EPSS 1.03%

Description

Multiple cross-site scripting (XSS) vulnerabilities in the WEC Discussion Forum (wec_discussion) extension 1.7.0 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-3029.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (5)

http://secunia.com/advisories/33254
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://typo3.org/extensions/repository/view/wec_discussion/1.7.1
x_refsource_CONFIRM
http://typo3.org/teams/security/security-bulletins/typo3-20081222-2
x_refsource_CONFIRMPatchVendor Advisory
http://www.vupen.com/english/advisories/2008/3502
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-6114
Advisory

Link	Providers	Tags
http://secunia.com/advisories/33254		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://typo3.org/extensions/repository/view/wec_discussion/1.7.1		x_refsource_CONFIRM
http://typo3.org/teams/security/security-bulletins/typo3-20081222-2		x_refsource_CONFIRMPatchVendor Advisory
http://www.vupen.com/english/advisories/2008/3502		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-6114		Advisory