CVE-2009-4804

Published: Apr 23, 2010Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Calendar Base (cal) extension before 1.1.1 for TYPO3, when Internet Explorer 6 is used, allows remote attackers to inject arbitrary web script or HTML via "search parameters."

Affected (28)

Products: Mario Matzulla: Calendar Base

Mario Matzulla

1 product

Calendar Base

Configuration A

28 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Mario Matzulla Calendar Base	Up to 1.1.0
Mario Matzulla Calendar Base	Version 0.10.0
Mario Matzulla Calendar Base	Version 0.11.0
Mario Matzulla Calendar Base	Version 0.12.0
Mario Matzulla Calendar Base	Version 0.12.1
Mario Matzulla Calendar Base	Version 0.13.0
Mario Matzulla Calendar Base	Version 0.13.1
Mario Matzulla Calendar Base	Version 0.14.0
Mario Matzulla Calendar Base	Version 0.14.1
Mario Matzulla Calendar Base	Version 0.15.0
Mario Matzulla Calendar Base	Version 0.15.1
Mario Matzulla Calendar Base	Version 0.15.2
Mario Matzulla Calendar Base	Version 0.15.3
Mario Matzulla Calendar Base	Version 0.15.4
Mario Matzulla Calendar Base	Version 0.15.5
Mario Matzulla Calendar Base	Version 0.16.0
Mario Matzulla Calendar Base	Version 0.16.1
Mario Matzulla Calendar Base	Version 0.16.2
Mario Matzulla Calendar Base	Version 0.16.3
Mario Matzulla Calendar Base	Version 0.16.4
Mario Matzulla Calendar Base	Version 0.16.5
Mario Matzulla Calendar Base	Version 0.16.6
Mario Matzulla Calendar Base	Version 0.17.0
Mario Matzulla Calendar Base	Version 0.17.1
Mario Matzulla Calendar Base	Version 0.17.2
Mario Matzulla Calendar Base	Version 0.17.3
Mario Matzulla Calendar Base	Version 0.9.0
Mario Matzulla Calendar Base	Version 1.0.0