TYPO3-CORE-SA-2012-002: Cross-Site Scripting Vulnerability in TYPO3 Core
April 17, 2012
It has been discovered that TYPO3 Core is vulnerable to Cross-Site Scripting.
DetailsApril 17, 2012
It has been discovered that TYPO3 Core is vulnerable to Cross-Site Scripting.
DetailsMarch 28, 2012
It has been discovered that the extension "Basic SEO Features" (seo_basics) is vulnerable to Cross-Site Scripting
DetailsMarch 28, 2012
Several vulnerabilities have been found in the following third-party TYPO3 extensions: fe_whois, cag_tables, additional_reports, general_data_display, realty, dkd_feuser_belogin, tc_fbconnect, dix_easylogin, ajado_facebook, facebook2t3, sociallogin2t3, kb_eventboard, news
DetailsMarch 28, 2012
It has been discovered that the extension "powermail" (powermail) is vulnerable to Cross-Site Scripting
DetailsMarch 28, 2012
It has been discovered that TYPO3 Core is vulnerable to Cross-Site Scripting, Information Disclosure, Insecure Unserialize
DetailsMarch 28, 2012
It has been discovered that FLOW3 is vulnerable to Insecure Unserialize
DetailsFebruary 23, 2012
Several vulnerabilities have been found in the following third-party TYPO3 extensions: tkcropthumbs, t3extplorer, tc_beuser, an_predigten, solr, pdfcontroller, cc20, jwplayer
DetailsFebruary 23, 2012
It has been discovered that the extension "Front End User Registration" (sr_feuser_register) is vulnerable to information disclosure
DetailsFebruary 02, 2012
Several vulnerabilities have been found in the following third-party TYPO3 extensions: css_filelinks, terminal, beuserswitch, rtg_files, irfaq, skt_eurocalc, jftcaforms, bc_post2facebook, aeurltool, mv_cooking, toi_category, ajado_facebook
DetailsDecember 16, 2011
It has been discovered that TYPO3 Core is vulnerable to Remote Code Execution.
Details