Security Bulletins

Multiple vulnerabilities in third party extensions

Authors: Georg Ringer, Category: TYPO3 Extension January 13, 2010

Several vulnerabilities have been found in the following third party TYPO3 extensions: MK-AnydropdownMenu (mk_anydropdownmenu), Photo Book (goof_fotoboek), SB Folderdownload (sb_folderdownload), Developer log (devlog), KJ: Imagelightbox (kj_imagelightbox2), Unit Converter (cs2_unitconv), powermail ...

Details

Multiple vulnerabilities in third party extensions

Authors: Georg Ringer, Category: TYPO3 Extension December 15, 2009

Several vulnerabilities have been found in the following third party TYPO3 extensions: Car (car), TYPO3 Watchdog (aba_watchdog), File list (dr_blob), ListMan (nl_listman), XDS Staff List (xds_staff), Document Directorys (danp_documentdirs), Random Prayer Version 2 (ste_prayer2), Diocese of ...

Details

Multiple vulnerabilities in third party extensions

Authors: Marcus Krause, Category: TYPO3 Extension December 01, 2009

Several vulnerabilities have been found in the following third party TYPO3 extensions: [AN] Search it! (an_searchit), Simple download-system with counter and categories (kk_downloader), Automatic Base Tags for RealUrl (lt_basetag), Trips (mchtrips), simple Glossar (simple_glossar), TW Productfinder ...

Details

Multiple vulnerabilities in TYPO3 Core

Authors: Helmut Hummel, Category: TYPO3 CMS October 22, 2009

It has been discovered that TYPO3 Core is vulnerable to Cross-Site Scripting, SQL-Injection, Remote Command Execution, Information Disclosure and insecure Install Tool authentication/session handling.

Details

TYPO3 Security Bulletin

Authors: , Category: TYPO3 Extension October 20, 2009

Several vulnerabilities have been found in the following third party TYPO3 extensions: Apache Solr Search (solr), Random Images (maag_randomimage), Flagbit Filebase (fb_filebase), freeCap CAPTCHA (sr_freecap)

Details

Multiple vulnerabilities in third party extensions

Authors: Marcus Krause, Category: TYPO3 Extension August 18, 2009

Several vulnerabilities have been found in the following third party TYPO3 extensions: "AIRware Lexicon" (air_lexicon), "AST ZipCodeSearch" (ast_addresszipsearch), "Car" (car), "Event Registration" (event_registr), "Solidbase Bannermanagement" (SBbanner), "t3m_affiliate" (t3m_affiliate), "AJAX ...

Details