TYPO3-SA-2010-007: Cross-Site Scripting vulnerability in extension mm_forum (mm_forum)
March 16, 2010
It has been discovered that the extension mm_forum (mm_forum) is vulnerable to Cross-Site Scripting.
DetailsPlatinum sponsors
TYPO3-SA-2010-006: Multiple vulnerabilities in third party extensions
March 16, 2010
Several vulnerabilities have been found in the following third party TYPO3 extensions: Brainstorming (brainstorming), Power Extension Manager (ch_lightem), Sellector.com Widget Integration (chsellector), Educator (educator), MK Wastebasket (mk_wastebasket), myDashboard (mydashboard), CleanDB ...
DetailsTYPO3-SA-2010-005: Blind SQL Injection vulnerability in extension Calendar Base (cal)
March 02, 2010
It has been discovered that the extension Calendar Base (cal) is vulnerable to Blind SQL Injection.
DetailsTYPO3-SA-2010-004: Vulnerabilities in TYPO3 Core
February 23, 2010
It has been discovered that TYPO3 Core is vulnerable to Cross-Site Scripting, Authentication Bypass for frontend users and Information Disclosure.
DetailsTYPO3-SA-2010-003: Multiple vulnerabilities in third party extensions
February 01, 2010
Several vulnerabilities have been found in the following third party TYPO3 extensions: Event Manager (eventmanagement), Game Article DB (game_articledb), Simple career (ml_career), Surprise Calendar (ml_surprisecalendar), Search Api Ajax Google (searchajaxgoogle), Download Manager ...
DetailsTYPO3-SA-2010-002: Multiple vulnerabilities in extension T3BLOG (t3blog)
February 01, 2010
It has been discovered that the extension T3BLOG (t3blog) is vulnerable to SQL Injection and Cross–Site Scripting.
DetailsTYPO3-SA-2010-001: Vulnerability in TYPO3 Core
January 14, 2010
It has been discovered that TYPO3 Core is vulnerable to authentication bypass.
DetailsTYPO3-SA-2009-021: Multiple vulnerabilities in third party extensions
January 13, 2010
Several vulnerabilities have been found in the following third party TYPO3 extensions: MK-AnydropdownMenu (mk_anydropdownmenu), Photo Book (goof_fotoboek), SB Folderdownload (sb_folderdownload), Developer log (devlog), KJ: Imagelightbox (kj_imagelightbox2), Unit Converter (cs2_unitconv), powermail ...
DetailsTYPO3-SA-2009-020: Multiple vulnerabilities in third party extensions
December 15, 2009
Several vulnerabilities have been found in the following third party TYPO3 extensions: Car (car), TYPO3 Watchdog (aba_watchdog), File list (dr_blob), ListMan (nl_listman), XDS Staff List (xds_staff), Document Directorys (danp_documentdirs), Random Prayer Version 2 (ste_prayer2), Diocese of ...
DetailsTYPO3-SA-2009-019: Blind SQL Injection vulnerability in extension Calendar Base (cal)
December 01, 2009
It has been discovered that the extension Calendar Base (cal) is vulnerable to Blind SQL Injection.
Details
