SQL Injection and Open Redirection in TYPO3 Core
March 06, 2013
It has been discovered that TYPO3 Core is susceptible to SQL Injection and Open Redirection
DetailsPlatinum sponsors
Security Bulletins
Several vulnerabilities in third party extensions
February 19, 2013
Several vulnerabilities have been found in the following third-party TYPO3 extensions: fed, myquizpoll, push2rss_3ds, slideshare, wec_discussion
DetailsCross-Site Scripting vulnerability in extension Static Info Tables (static_info_tables)
February 19, 2013
It has been discovered that the extension "Static Info Tables" (static_info_tables) is vulnerable to Cross-Site Scripting.
DetailsSQL Injection vulnerability in extension CoolURI (cooluri)
February 19, 2013
It has been discovered that the extension "CoolURI" (cooluri) is vulnerable to SQL Injection.
DetailsSeveral vulnerabilities in third party extensions
January 28, 2013
Several vulnerabilities have been found in the following third-party TYPO3 extensions: attacalendar, attacpetition, eu_subscribe, exinit_job_offer, fefilebrowser, js_css_optimizer, kk_csv2table, lonewsseo, mn_mysql2json, news_search, tipafriend_plus, twitter_auth, sofortueberweisung2commerce, ...
DetailsSeveral vulnerabilities in third party extensions
January 11, 2013
Several vulnerabilities have been found in the following third-party TYPO3 extensions: news, onetimeaccount, phpunit, div2007, t3mootools, t3jquery, oneclicklogin
DetailsSeveral Vulnerabilities in extension commerce (commerce)
December 21, 2012
It has been discovered that the extension commerce (commerce) is vulnerable to Cross Site Scripting.
DetailsSeveral Vulnerabilities in TYPO3 Core
November 08, 2012
It has been discovered that TYPO3 Core is vulnerable to SQL Injection, Information Disclosure and Cross-Site Scripting
DetailsSeveral Vulnerabilities in extension Formhandler (formhandler)
October 25, 2012
It has been discovered that the extension Formhandler (formhandler) is vulnerable to SQL-Injection and Cross-Site Scripting.
DetailsSeveral Vulnerabilities in TYPO3 Core
August 15, 2012
It has been discovered that TYPO3 Core is vulnerable to Cross-Site Scripting, Information Disclosure, Insecure Unserialize leading to Arbitrary Code Execution
Details
