Description
Cross-site scripting (XSS) vulnerability in class.tx_indexedsearch.php in the Indexed Search 2.9.0 extension for Typo3 before 4.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter.
References
- ADV-2006-3782 vdb-entry
- 22071 third-party-advisory
- typo3-search-xss(29128) vdb-entry
- 20173 vdb-entry
- 1646 third-party-advisory
- 20060925 Typo3 v4.x: XSS in extension "Indexed Search" v2.9.0 mailing-list
- 20060925 Typo3 v4.x: XSS in extension "Indexed Search" mailing-list
- http://typo3.org/teams/security/security-bulletins/typo3-20060911-1/