CVE-2008-2718

Vulnerability

A cross-site scripting (XSS) vulnerability exists in the fe_adminlib.inc library of TYPO3, which is used by extensions such as direct_mail_subscription, feuser_admin, and kb_md5fepw. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected versions are TYPO3 4.0.x before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.2.1 [1].

Exploitation

An attacker can exploit this vulnerability by sending a crafted HTTP request to a TYPO3 instance that uses the vulnerable fe_adminlib.inc library. No authentication is required, and the attack can be performed remotely. The exact input vectors are not disclosed in the available references, but the XSS is triggered when the library processes user-supplied data without proper sanitization [1].

Impact

Successful exploitation allows the attacker to execute arbitrary web script or HTML in the context of the victim's browser. This can lead to session hijacking, defacement, credential theft, or other malicious actions performed under the victim's identity and privileges within the TYPO3 frontend.

Mitigation

The vulnerability is fixed in TYPO3 versions 4.0.9, 4.1.7, and 4.2.1. Users should upgrade to these or later versions. No workarounds are documented in the available references [1].