CVE-2012-1075

The CVE-2012-1075 entry concerns the TYPO3 extension rtg_files (Documents download). The vulnerability is an SQL injection in the rtg_files extension prior to version 1.5.2, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected software is TYPO3 with the rt...

CVE-2012-1076

The CVE-2012-1076 affects the TYPO3 extension rtg_files in the Documents download feature, vulnerable before version 1.5.2 . The issue is a Cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Impact details are limi...