CVE-2008-2451

CVE-2008-2451 concerns the TYPO3 Statistics (aka ke_stats) extension, affected in versions up to 0.1.2. The vulnerability is described as multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands via unspecified vectors. The connected documents confirm the affecte...

CVE-2008-2450

TYPO3’s Statistics (ke_stats) extension versions 0.1.2 and earlier contain multiple reflected XSS vulnerabilities that could allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. The affected component is the ke_stats/statistics extension for TYPO3; the exact vect...