Vulnerabilities > Typo3 > Address Directory

DATE CVE VULNERABILITY TITLE RISK
2008-07-07 CVE-2008-3038 SQL Injection vulnerability in Typo3 Address Directory
SQL injection vulnerability in the Address Directory (sp_directory) extension 0.2.10 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
network
low complexity
typo3 CWE-89
7.5
7.5
2008-07-07 CVE-2008-3037 Cross-Site Scripting vulnerability in Typo3 Address Directory
Cross-site scripting (XSS) vulnerability in the Address Directory (sp_directory) extension 0.2.10 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
typo3 CWE-79
4.3
4.3