10 October 2005

Security Bulletin TYPO3-20051010-1: fe_news

Categories: Security Created by Ekkehard Gümbel

A bug has been discovered in the "Front End News Submitter" (fe_news) where SQL injection is not safely prevented. fe_rtenews is affected as well.

A fix is available for fe_rtenews, while fe_news has been removed from the TER.

Please see the complete Bulletin for details.

Latest news

17 Jul 2025

Ready, Set, London!

Join TYPO3 Camp London for expert talks, networking, and social nights. Discover the full speaker lineup, event details, and tips for planning your…
16 Jul 2025

The TYPO3 Association Has Been Authorized by the CVE Program as a CVE Numbering Authority (CNA)

As of 15 July 2025, the TYPO3 Association has received official approval from the CVE Program to operate as a CVE Numbering Authority (CNA). Common…
15 Jul 2025

TYPO3 Prominence at e-Governance Conference in Estonia

The central theme of the 11th e-Governance Conference was "From Bytes to Benefits: Raising Prosperity Through Digital Transformation." Held in…
13 Jul 2025

Components Have Landed in Fluid

Thanks to a funded budget idea from Simon Praetorius, Fluid now supports components — reusable custom tags that make your templates cleaner and easier…
08 Jul 2025

TYPO3 13.4.15 and 12.4.34 maintenance releases published

The versions 13.4.15 and 12.4.34 of the TYPO3 Enterprise Content Management System have just been released.
06 Jul 2025

Calling All TYPO3 Agencies and Freelancers: Let’s talk about current trends and what’s next in TYPO3 in Munich!

We’re excited to invite all TYPO3 agency owners, freelancers, and digital professionals to the upcoming TYPO3 Agency Roundtable, taking place on 12…

Show more