CVE-2008-5995: XSS
Published Jan 28, 2009
·Updated
Cross-site scripting (XSS) vulnerability in the freeCap CAPTCHA (srfreecap) extension before 1.0.4 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
10 affected components
Typo3 Freecap Captcha Extension<=1.0.3
Typo3 Freecap Captcha Extension=1.0.0
Typo3 Freecap Captcha Extension=1.0.1
Typo3 Freecap Captcha Extension=1.0.2
Typo3 TYPO3
All of the following
Any of the following
Typo3 Freecap Captcha Extension<=1.0.3
Typo3 Freecap Captcha Extension=1.0.0
Typo3 Freecap Captcha Extension=1.0.1
Typo3 Freecap Captcha Extension=1.0.2
Typo3 TYPO3
Remediation
Event History
Jan 28, 2009
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
03:30 PM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·03:30 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-5995?
CVE-2008-5995 is classified as a medium severity vulnerability due to its potential for Cross-site scripting (XSS) attacks.
2
How do I fix CVE-2008-5995?
To fix CVE-2008-5995, upgrade the freeCap CAPTCHA extension to version 1.0.4 or later.
3
What types of attacks can CVE-2008-5995 allow?
CVE-2008-5995 allows remote attackers to inject arbitrary web scripts or HTML into the application.
4
Which versions are affected by CVE-2008-5995?
CVE-2008-5995 affects versions of the freeCap CAPTCHA extension prior to 1.0.4, including versions 1.0.0 to 1.0.3.
5
Who is impacted by CVE-2008-5995?
Any users of the TYPO3 freeCap CAPTCHA extension prior to version 1.0.4 are impacted by CVE-2008-5995.