CVE:CVE-2009-4804
CNNVD:CNNVD-201004-384
Typo3是开源内容管理系统和内容管理框架(CMF)。
TYP03的Calendar Base (cal)扩展件存在跨站脚本攻击漏洞，当使用IE6时，远程攻击者可通过"search parameters"注入任意网页脚本或HTML。
solution:Upgrade mario_matzulla calendar_base to a higher version than 1.1.0,0.9.0,0.10.0,0.11.0,0.12.0,0.12.1,0.13.0,0.13.1,0.14.0,0.14.1,0.15.0,0.15.1,0.15.2,0.15.3,0.15.4,0.15.5,0.16.0,0.16.1,0.16.2,0.16.3,0.16.4,0.16.5,0.16.6,0.17.0,0.17.1,0.17.2,0.17.3,1.0.0,and avoid the version (,1.1.0],0.9.0,0.10.0,0.11.0,0.12.0,0.12.1,0.13.0,0.13.1,0.14.0,0.14.1,0.15.0,0.15.1,0.15.2,0.15.3,0.15.4,0.15.5,0.16.0,0.16.1,0.16.2,0.16.3,0.16.4,0.16.5,0.16.6,0.17.0,0.17.1,0.17.2,0.17.3,1.0.0