CVE-2010-4960: XSS
Published Oct 9, 2011
·Updated
Cross-site scripting (XSS) vulnerability in the Branchenbuch (aka Yellow Pages or mhbranchenbuch) extension before 0.9.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
6 affected components
Martin Hesse Mh Branchenbuch<=0.9.0
Martin Hesse Mh Branchenbuch=0.7.95
Martin Hesse Mh Branchenbuch=0.8.0
Martin Hesse Mh Branchenbuch=0.8.1
Martin Hesse Mh Branchenbuch=0.8.2
Typo3 TYPO3
Remediation
Event History
Oct 9, 2011
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
10:55 AM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-4960?
The severity of CVE-2010-4960 is considered medium due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2010-4960?
To fix CVE-2010-4960, upgrade the Branchenbuch extension to version 0.9.1 or later.
3
Which versions of the Branchenbuch extension are affected by CVE-2010-4960?
CVE-2010-4960 affects versions of the Branchenbuch extension before 0.9.1, including 0.7.95 to 0.8.2.
4
What type of vulnerability is CVE-2010-4960?
CVE-2010-4960 is a cross-site scripting (XSS) vulnerability allowing attackers to inject scripts.
5
Can CVE-2010-4960 affect TYPO3 installations?
Yes, CVE-2010-4960 specifically affects TYPO3 installations using the vulnerable versions of the Branchenbuch extension.