Cross-Site Scripting Vulnerability in TYPO3 Terminal PHP Shell Extension
CVE-2012-1082

Currently unrated

Key Information:

Vendor

Typo3

Status
Terminal
Vendor
CVE Published:
14 February 2012

What is CVE-2012-1082?

The Terminal PHP Shell extension for TYPO3 is susceptible to a cross-site scripting (XSS) vulnerability that permits remote authenticated users to execute arbitrary web scripts or HTML. This can be exploited through unspecified vectors, potentially compromising the integrity of the web application and exposing sensitive user information.

References

http://typo3.org/teams/security/security-bulletins/typo3-...
x_refsource_MISC
http://www.securityfocus.com/bid/51849
vdb-entryx_refsource_BID
http://osvdb.org/78796
vdb-entryx_refsource_OSVDB

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.