CVE-2009-4400: XSS
Published Dec 22, 2009
·Updated
Cross-site scripting (XSS) vulnerability in the Parish Administration Database (steparishadmin) extension 0.1.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
2 affected components
Fr.simon Rundell Ste Parish Admin<=0.1.3
Typo3 TYPO3
Event History
Dec 22, 2009
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Data Sourced
11:30 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-4400?
CVE-2009-4400 has been classified as a moderate severity cross-site scripting vulnerability.
2
How do I fix CVE-2009-4400?
To fix CVE-2009-4400, upgrade the Parish Administration Database extension to version 0.1.4 or later.
3
What software is affected by CVE-2009-4400?
CVE-2009-4400 affects the Parish Administration Database extension version 0.1.3 and earlier on TYPO3.
4
What type of vulnerability is CVE-2009-4400?
CVE-2009-4400 is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web scripts or HTML.
5
Can CVE-2009-4400 be exploited remotely?
Yes, CVE-2009-4400 can be exploited remotely by attackers through unspecified vectors.