CVE-2010-0327

Cross-site scripting (XSS) vulnerability in the KJ: Imagelightbox (kj_imagelightbox2) extension 2.0.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2008-2490.

• CWE-79

• http://secunia.com/advisories/38165Vendor Advisory
• http://typo3.org/extensions/repository/view/kj_imagelightbox2/2.0.2/Patch
• http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/Patch, Vendor Advisory
• http://secunia.com/advisories/38165Vendor Advisory
• http://typo3.org/extensions/repository/view/kj_imagelightbox2/2.0.2/Patch
• http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/Patch, Vendor Advisory

Published

Jan 15, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-0321Cross-site scripting (XSS) vulnerability in jobs/index.php i…
• CVE-2010-0322SQL injection vulnerability in the init function in MK-Anydr…
• CVE-2010-0323Unspecified vulnerability in the Photo Book (goof_fotoboek) …
• CVE-2010-0324SQL injection vulnerability in the Customer Reference List (…
• CVE-2010-0325Unspecified vulnerability in the SB Folderdownload (sb_folde…
• CVE-2010-0326Cross-site scripting (XSS) vulnerability in the Developer lo…
• CVE-2010-0328Cross-site scripting (XSS) vulnerability in the Unit Convert…
• CVE-2010-0329SQL injection vulnerability in the powermail extension 1.5.1…
• CVE-2010-0330SQL injection vulnerability in the Googlemaps for tt_news (j…
• CVE-2010-0331Cross-site scripting (XSS) vulnerability in the TV21 Talksho…
• CVE-2010-0332SQL injection vulnerability in the TV21 Talkshow (tv21_talks…
• CVE-2010-0333SQL injection vulnerability in the Helpdesk (mg_help) extens…