CVE-2008-6698

CVE-2008-6698 affects the TARGET-E WorldCup Bets TYPO3 extension for version 2.0.0 and earlier. The vulnerability is a cross-site scripting (XSS) issue that allows remote attackers to inject arbitrary web script or HTML via unknown vectors. The NVD CVSSv2 base score is 4.3 (MEDIUM) with a network...

CVE-2008-6697

CVE-2008-6697 describes a SQL injection vulnerability in the TARGET-E WorldCup Bets (worldcup) 2.0.0 and earlier extension for TYPO3. The issue allows remote attackers to execute arbitrary SQL commands via unknown vectors, indicating a classic injection flaw in the extension’s interaction with th...