TYPO3-EXT-SA-2011-014: Multiple vulnerabilities in extension phpMyAdmin (phpmyadmin)
October 18, 2011
It has been discovered that the extension phpMyAdmin (phpmyadmin) is vulnerable to Cross-Site Scripting and Full Path Disclosure.
DetailsPlatinum sponsors
TYPO3-EXT-SA-2011-012: Several vulnerabilities in third party extensions
September 28, 2011
Several vulnerabilities have been found in the following third-party TYPO3 extensions: mm_hutinfo, np_indexed_search_stat, rzcolorbox, t3c_podcasts, winning_game, tgm_gallery, tgmv_gallery, bps_shib, dev_null_robots, dhc_inflationcal, dam_frontend, rtg_files, mg_rooms, gridelements
DetailsTYPO3-EXT-SA-2011-013: Cross-Site scripting vulnerability in extension t3blog (t3blog)
September 27, 2011
It has been discovered that the extension "T3Blog" (t3blog) is vulnerable to Cross-Site Scripting.
DetailsTYPO3-EXT-SA-2011-011: Multiple XSS vulnerabilities in extension phpMyAdmin (phpmyadmin)
September 15, 2011
It has been discovered that the extension phpMyAdmin (phpmyadmin) is vulnerable to Cross-Site Scripting.
DetailsTYPO3-CORE-SA-2011-003: Improper error handling could lead to cache flooding in TYPO3 Core
September 14, 2011
It has been discovered that TYPO3 is susceptible to Cache Flooding
DetailsTYPO3-CORE-SA-2011-002: Potential SQL injection vulnerability in TYPO3 Core
September 14, 2011
It has been discovered that the TYPO3 prepared statement database API allows SQL Injections.
DetailsTYPO3-EXT-SA-2011-009: Several Vulnerabilities in extension MailformPlus (th_mailformplus)
September 07, 2011
Several vulnerabilities have been found in the following third-party TYPO3 extension: th_mailformplus
DetailsTYPO3-EXT-SA-2011-008: Several Vulnerabilities in extension SmoothGallery for TYPO3 (rgsmoothgallery)
September 07, 2011
Several vulnerabilities have been found in the following third-party TYPO3 extension: rgsmoothgallery
DetailsTYPO3-EXT-SA-2011-007: Several Vulnerabilities in extension Direct Mail Subscription (direct_mail_subscription)
September 07, 2011
Several vulnerabilities have been found in the following third-party TYPO3 extension: direct_mail_subscription
DetailsTYPO3-EXT-SA-2011-010: A vulnerability in extension Drag Drop Mass Upload (ameos_dragndropupload)
September 07, 2011
A vulnerability has been found in the following third-party TYPO3 extension: ameos_dragndropupload
Details
