CVE-2008-6687: XSS
Published Apr 10, 2009
·Updated
Cross-site scripting (XSS) vulnerability in DCD GoogleMap (dcdgooglemap) 1.1.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Affected Software
6 affected components
Typo3 TYPO3
David Cadu Dcdgooglemap<=1.1.0
David Cadu Dcdgooglemap=1.0.0
David Cadu Dcdgooglemap=1.0.1
David Cadu Dcdgooglemap=1.0.2
David Cadu Dcdgooglemap=1.1.1
Remediation
Event History
Apr 10, 2009
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
10:00 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-6687?
The severity of CVE-2008-6687 is classified as medium due to its cross-site scripting (XSS) vulnerability that can allow attackers to inject malicious scripts.
2
How do I fix CVE-2008-6687?
To fix CVE-2008-6687, upgrade the DCD GoogleMap extension to version 1.1.1 or later, which addresses this vulnerability.
3
Which versions are affected by CVE-2008-6687?
CVE-2008-6687 affects DCD GoogleMap versions 1.1.0 and earlier.
4
What kind of attacks can exploit CVE-2008-6687?
CVE-2008-6687 can be exploited by remote attackers to execute arbitrary web scripts or HTML on the affected system.
5
Is TYPO3 itself affected by CVE-2008-6687?
No, TYPO3 itself is not vulnerable; only the DCD GoogleMap extension is affected by CVE-2008-6687.