CVE-2008-5795: XSS
Published Dec 31, 2008
·Updated
Cross-site scripting (XSS) vulnerability in the eluna Page Comments (elunapagecomments) extension 1.1.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
4 affected components
Typo3 Eluna Page Comments Extension<=1.1.2
Typo3 TYPO3
All of the following
Typo3 Eluna Page Comments Extension<=1.1.2
Typo3 TYPO3
Event History
Dec 31, 2008
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Data Sourced
11:30 AM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·11:30 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-5795?
CVE-2008-5795 has a moderate severity level due to its potential for XSS attacks.
2
How do I fix CVE-2008-5795?
To fix CVE-2008-5795, update the eluna Page Comments extension to version 1.1.3 or later.
3
What software is affected by CVE-2008-5795?
CVE-2008-5795 affects the eluna Page Comments extension versions 1.1.2 and earlier for TYPO3.
4
Can CVE-2008-5795 be exploited remotely?
Yes, CVE-2008-5795 can be exploited remotely by injecting arbitrary web scripts or HTML.
5
What type of attack does CVE-2008-5795 enable?
CVE-2008-5795 enables cross-site scripting (XSS) attacks.