TYPO3-CORE-SA-2013-001: SQL Injection and Open Redirection in TYPO3 Core
March 06, 2013
It has been discovered that TYPO3 Core is susceptible to SQL Injection and Open Redirection
DetailsPlatinum sponsors
TYPO3-EXT-SA-2013-005: Several vulnerabilities in third party extensions
February 19, 2013
Several vulnerabilities have been found in the following third-party TYPO3 extensions: fed, myquizpoll, push2rss_3ds, slideshare, wec_discussion
DetailsTYPO3-EXT-SA-2013-004: Cross-Site Scripting vulnerability in extension Static Info Tables (static_info_tables)
February 19, 2013
It has been discovered that the extension "Static Info Tables" (static_info_tables) is vulnerable to Cross-Site Scripting.
DetailsTYPO3-EXT-SA-2013-003: SQL Injection vulnerability in extension CoolURI (cooluri)
February 19, 2013
It has been discovered that the extension "CoolURI" (cooluri) is vulnerable to SQL Injection.
DetailsTYPO3-EXT-SA-2013-002: Several vulnerabilities in third party extensions
January 28, 2013
Several vulnerabilities have been found in the following third-party TYPO3 extensions: attacalendar, attacpetition, eu_subscribe, exinit_job_offer, fefilebrowser, js_css_optimizer, kk_csv2table, lonewsseo, mn_mysql2json, news_search, tipafriend_plus, twitter_auth, sofortueberweisung2commerce, ...
DetailsTYPO3-EXT-SA-2013-001: Several vulnerabilities in third party extensions
January 11, 2013
Several vulnerabilities have been found in the following third-party TYPO3 extensions: news, onetimeaccount, phpunit, div2007, t3mootools, t3jquery, oneclicklogin
DetailsTYPO3-EXT-SA-2012-013: Several Vulnerabilities in extension commerce (commerce)
December 21, 2012
It has been discovered that the extension commerce (commerce) is vulnerable to Cross Site Scripting.
DetailsTYPO3-CORE-SA-2012-005: Several Vulnerabilities in TYPO3 Core
November 08, 2012
It has been discovered that TYPO3 Core is vulnerable to SQL Injection, Information Disclosure and Cross-Site Scripting
DetailsTYPO3-EXT-SA-2012-012: Several Vulnerabilities in extension Formhandler (formhandler)
October 25, 2012
It has been discovered that the extension Formhandler (formhandler) is vulnerable to SQL-Injection and Cross-Site Scripting.
DetailsTYPO3-CORE-SA-2012-004: Several Vulnerabilities in TYPO3 Core
August 15, 2012
It has been discovered that TYPO3 Core is vulnerable to Cross-Site Scripting, Information Disclosure, Insecure Unserialize leading to Arbitrary Code Execution
Details
