CVE-2008-2526

The CVE-2008-2526 entry concerns the TYPO3 WT Gallery (wt_gallery) extension, affected in version 2.6.2 and earlier. The vulnerability is a Cross-site Scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected sources confirm th...

CVE-2008-6630

The CVE-2008-6630 entry describes a directory traversal vulnerability in the TYPO3 wt_gallery extension (versions 2.5.0 and earlier). Affected component: wt_gallery (TYPO3). Root cause: improper handling of file paths allows remote attackers to read arbitrary image files and map directory structu...