VYPR

vote_for_tt_news

by TYPO3

CVEs (2)

  • CVE-2010-0335Jan 15, 2010
    risk 0.00cvss epss 0.01

    Cross-site scripting (XSS) vulnerability in the Vote rank for news (vote_for_tt_news) extension 1.0.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2010-0334Jan 15, 2010
    risk 0.00cvss epss 0.01

    SQL injection vulnerability in the Vote rank for news (vote_for_tt_news) extension 1.0.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.