Typo3 Address Directory vulnerabilities

• typo3 address directory SQL injection vulnerability in the Address Directory (sp_directory) extension 0.2.10 and earlier... CVE-2008-3038 7.5 HighJuly 7, 2008
• typo3 address directory Cross-site scripting (XSS) vulnerability in the Address Directory (sp_directory) extension 0.2.10... CVE-2008-3037 4.3 MediumJuly 7, 2008