CVE-2010-0797

The CVE-2010-0797 entry concerns a Cross-site Scripting (XSS) vulnerability in the TYPO3 T3BLOG extension (versions 0.6.2 and earlier). The underlying issue is an XSS flaw in the extension, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. No specific affec...

CVE-2010-0798

CVE-2010-0798 affects TYPO3’s T3BLOG extension up to version 0.6.2. The vulnerability is a SQL injection that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Connected sources confirm the affected product (TYPO3/T3BLOG), version range ≤0.6.2, and the injection i...