CVE-2010-0326
Published Jan 15, 2010
Last updated 15 years ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability in the Developer log (devlog) extension 2.9.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:francois_suter:devlog:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B0E8D4F3-BCF0-4313-AF93-20E76E6BBA04",
"versionEndIncluding": "2.9.1"
},
{
"criteria": "cpe:2.3:a:francois_suter:devlog:2.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E72DDE83-0ED6-4A56-BF9A-28A872349FD8"
},
{
"criteria": "cpe:2.3:a:francois_suter:devlog:2.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4BA62F96-CC41-4A05-855F-359821EC90C5"
},
{
"criteria": "cpe:2.3:a:francois_suter:devlog:2.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "11791D7C-F737-4EFC-9002-B1286E286D5F"
},
{
"criteria": "cpe:2.3:a:francois_suter:devlog:2.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "127CBC3F-C22B-4763-A7E3-591FA3817C79"
},
{
"criteria": "cpe:2.3:a:francois_suter:devlog:2.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "88656B43-B567-4950-8F59-0BE3B4E3837C"
},
{
"criteria": "cpe:2.3:a:francois_suter:devlog:2.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5F53630A-3358-476F-AB79-8B28361CF2EC"
},
{
"criteria": "cpe:2.3:a:francois_suter:devlog:2.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D95E74F0-2B72-486C-A857-54F31ED807CF"
},
{
"criteria": "cpe:2.3:a:francois_suter:devlog:2.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CB71575D-881B-4F5D-AF95-04C70F8A2D2C"
},
{
"criteria": "cpe:2.3:a:francois_suter:devlog:2.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7B0C11BC-28AD-4C7E-B6B2-CA1F5A6D608F"
},
{
"criteria": "cpe:2.3:a:francois_suter:devlog:2.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5B7F1904-262F-4D1C-9559-4E26DBACE04B"
},
{
"criteria": "cpe:2.3:a:francois_suter:devlog:2.7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "193F798D-8C54-4539-BC63-11FB753D8556"
},
{
"criteria": "cpe:2.3:a:francois_suter:devlog:2.8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D756CF70-F5F5-4D00-B9FD-E77BBF2A5E7C"
},
{
"criteria": "cpe:2.3:a:francois_suter:devlog:2.9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E227EF68-D078-4F77-AAEA-7ADDDEFBBFFB"
},
{
"criteria": "cpe:2.3:a:rene_fritz:devlog:1.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "80A3D33A-A63F-45E6-BE01-EDEAEC7084C0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5F1C59B0-CDF2-4F9A-88C7-61E8F18590DB"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]