CVE-2010-3659

Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 CMS 4.1.x before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4, and 4.4.x before 4.4.1 allow remote authenticated backend users to inject arbitrary web script or HTML via unspecified parameters to the extension manager, or unspecified parameters to unknown backend forms.

• CWE-79

• http://www.openwall.com/lists/oss-security/2010/09/28/8Mailing List
• http://www.openwall.com/lists/oss-security/2014/02/12/8Mailing List
• http://www.securityfocus.com/bid/42029Third Party Advisory, VDB Entry
• https://security-tracker.debian.org/tracker/CVE-2010-3659/Third Party Advisory
• https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-012/Vendor Advisory
• http://www.openwall.com/lists/oss-security/2010/09/28/8Mailing List
• http://www.openwall.com/lists/oss-security/2014/02/12/8Mailing List
• http://www.securityfocus.com/bid/42029Third Party Advisory, VDB Entry
• https://security-tracker.debian.org/tracker/CVE-2010-3659/Third Party Advisory
• https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-012/Vendor Advisory

Published

Oct 20, 2017

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-3653The Director module (dirapi.dll) in Adobe Shockwave Player b…
• CVE-2010-3654Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102…
• CVE-2010-3655Stack-based buffer overflow in dirapi.dll in Adobe Shockwave…
• CVE-2010-3656Unspecified vulnerability in Adobe Reader and Acrobat 9.x be…
• CVE-2010-3657Unspecified vulnerability in Adobe Reader and Acrobat 9.x be…
• CVE-2010-3658Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.…
• CVE-2010-3660TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4…5.4
• CVE-2010-3661TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4…6.1
• CVE-2010-3662TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4…8.8
• CVE-2010-3663TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4…8.8
• CVE-2010-3664TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4…6.5
• CVE-2010-3665TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4…5.4