CVE-2008-5796: SQL injection vulnerability in the eluna Page Comments (eluna_pagecomments) extension 1.1.2 and earlier for...

Security readout for executives and security teams

This issue affects the eluna Page Comments extension for TYPO3, version 1.1.2 and earlier. A remote attacker may be able to run database commands through SQL injection. The public record does not specify the exact attack path, business impact, or fixed version in the provided bundle. Exposure is most likely limited to TYPO3 sites using the eluna Page Comments extension version 1.1.2 or earlier. Public comment functionality increases concern. The provided data does not indicate TYPO3 core is affected. Treat as high priority if the extension is present on a public TYPO3 site. SQL injection can threaten website data integrity and confidentiality, but the bundle lacks proof of active exploitation or a named patch. Mitigation focus: Inventory TYPO3 sites for the eluna_pagecomments extension.; Identify any installations running version 1.1.2 or earlier.; Check TYPO3 and extension maintainer guidance for the corrected version or removal advice..

Prepared

Jun 28, 2026, 11:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.