Vulnerabilities

TI-2008-06387 CVE-2008-6698 · GHSA-f4q3-p6x3-h64v

Cross-site scripting (XSS) vulnerability in TARGET-E WorldCup Bets (worldcup) 2.0.0 and…

LOW 22

Cross-site scripting (XSS) vulnerability in TARGET-E WorldCup Bets (worldcup) 2.0.0 and earlier extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01033 Published 2009-04-10 No fix listed CWE-79

TI-2008-06386 CVE-2008-6697 · GHSA-h6w7-2gfc-rxm8

SQL injection vulnerability in TARGET-E WorldCup Bets (worldcup) 2.0.0 and earlier…

LOW 35

SQL injection vulnerability in TARGET-E WorldCup Bets (worldcup) 2.0.0 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01063 Published 2009-04-10 No fix listed CWE-89

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in TARGET-E WorldCup Bets (worldcup) 2.0.0 and…

SQL injection vulnerability in TARGET-E WorldCup Bets (worldcup) 2.0.0 and earlier…