Vulnerabilities

TI-2008-02908 CVE-2008-3038 · GHSA-rwm5-j4gw-46m8

SQL injection vulnerability in the Address Directory (sp_directory) extension 0.2.10 and…

LOW 35

SQL injection vulnerability in the Address Directory (sp_directory) extension 0.2.10 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01051 Published 2008-07-07 No fix listed CWE-89

TI-2008-02907 CVE-2008-3037 · GHSA-rj58-f4r4-fgj5

Cross-site scripting (XSS) vulnerability in the Address Directory (sp_directory)…

LOW 22

Cross-site scripting (XSS) vulnerability in the Address Directory (sp_directory) extension 0.2.10 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01022 Published 2008-07-07 No fix listed CWE-79

Vulnerabilities

Filters

SQL injection vulnerability in the Address Directory (sp_directory) extension 0.2.10 and…

Cross-site scripting (XSS) vulnerability in the Address Directory (sp_directory)…