Security issues in TYPO3 extension phpMyAdmin and several other third party extensions

Categories: Security Created by Henning Pingel
Security issues have been discovered in the following third party TYPO3 extensions: "phpMyAdmin" (phpmyadmin), "advCalendar" (advcalendar), "CMS Poll system" (cms_poll), "eLuna Page Comments" (eluna_pagecomments), "Wir ber uns" [sic] (fsmi_people), "Dictionary" (rtgdictionary).

For further information, please read the following bulletins:

TYPO3 Security Bulletin TYPO3-20081110-1: Cross-Site Scripting vulnerability in extension phpMyAdmin (phpmyadmin):
http://typo3.org/teams/security/security-bulletins/typo3-20081110-1/

TYPO3 Collective Security Bulletin TYPO3-20081110-2: Several vulnerabilities in third party extensions:
http://typo3.org/teams/security/security-bulletins/typo3-20081110-2/
 

In general the TYPO3 Security Team recommends to read the following pages: