CVE-2010-3674

MediumCVSS 6.1/10Last modified Jun 16, 2026

Description

TYPO3 before 4.4.1 allows XSS in the frontend search box.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2010-3674Third Party Advisory
https://typo3.org/security/advisory/typo3-sa-2010-012/#XSSVendor Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2010-3674Third Party Advisory
https://typo3.org/security/advisory/typo3-sa-2010-012/#XSSVendor Advisory

Timeline

Published: Nov 5, 2019
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-36764.0storage/innobase/dict/dict0crea.c in mysqld in Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service CVE-2010-36774.0Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) vi CVE-2010-36784.0Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (crash) via (1) IN or (2) CASE operations with CVE-2010-36794.0Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via certain arguments to CVE-2010-36804.0Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by creating temporary ta CVE-2010-36814.0Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by CVE-2010-36824.0Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by CVE-2010-36834.0Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL errors, which allows re CVE-2010-36842.1The FTP authentication module in Synology Disk Station 2.x logs passwords to the web application interface in cases of incorrect login attem CVE-2010-36855.0The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not ch CVE-2010-36865.0The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not en CVE-2010-36875.0Unspecified vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to bypass validation have an unspec