Security Advisories

All Advisories

Subscribe to our Security Advisories Mailing List and receive Security Bulletins via E-Mail

Wed. 12th February, 2014
TYPO3-EXT-SA-2014-005: Access Bypass in extensions "Yet Another Gallery" (yag) and "Tools for Extbase development" (pt_extbase)

Advisory type: TYPO3 Extensions
Created by Helmut Hummel

It has been discovered that the extensions "Yet Another Gallery" (yag) and "Tools for Extbase development" (pt_extbase) are susceptible to Access…
Read more
Wed. 12th February, 2014
TYPO3-EXT-SA-2014-004: Mass Assignment in extension Direct Mail Subscription (direct_mail_subscription)

Advisory type: TYPO3 Extensions
Created by Franz G. Jahn

It has been discovered that the extension "Direct Mail Subscription" (direct_mail_subscription) is susceptible to Mass Assignment.
Read more
Wed. 12th February, 2014
TYPO3-EXT-SA-2014-003: Insecure Unserialize in extension News (tt_news)

Advisory type: TYPO3 Extensions
Created by Franz G. Jahn

It has been discovered that the extension "News" (tt_news) is susceptible to Insecure Unserialize.
Read more
Wed. 12th February, 2014
TYPO3-EXT-SA-2014-002: Several vulnerabilities in third party extensions

Advisory type: TYPO3 Extensions
Created by Franz G. Jahn

Several vulnerabilities have been found in the following third-party TYPO3 extensions: alpha_sitemap, femanager ke_stats, outstats, px_phpids, smarty,…
Read more
Wed. 12th February, 2014
TYPO3-EXT-SA-2014-001: Several vulnerabilities in extension mm_forum (mm_forum)

Advisory type: TYPO3 Extensions
Created by Franz G. Jahn

It has been discovered that the extension "mm_forum" (mm_forum) is vulnerable to Arbitrary Code Execution, Cross-Site Scripting and Cross-Site Request…
Read more
Tue. 28th January, 2014
TYPO3-PSA-2014-001: Cross-Site Request Forgery Protection in TYPO3 CMS 6.2

Categories: Public Service Announcement

Advisory type: Public Service Announcements

TYPO3 CMS 6.2 will get CSRF Protection throughout all modules and parts that manipulate data.
Read more
Tue. 10th December, 2013
TYPO3-CORE-SA-2013-004: Multiple Vulnerabilities in TYPO3 CMS

Categories: TYPO3 CMS

Advisory type: TYPO3 CMS
Created by Helmut Hummel

It has been discovered that TYPO3 CMS is vulnerable to Cross-Site Scripting, Information Disclosure, Mass Assignment, Open Redirection and Insecure…
Read more
Wed. 25th September, 2013
TYPO3-EXT-SA-2013-018: Several vulnerabilities in extension AWStats (cc_awstats)

Advisory type: TYPO3 Extensions
Created by Franz G. Jahn

It has been discovered that the extension "AWStats" (cc_awstats) contains an unspecific vulnerability in the bundled AWStats version.
Read more
Wed. 25th September, 2013
TYPO3-EXT-SA-2013-017: Several vulnerabilities in third party extensions

Advisory type: TYPO3 Extensions
Created by Franz G. Jahn

Several vulnerabilities have been found in the following third-party TYPO3 extensions: booking, cronmm_ratsinfo, ics_awstats, iflowgallery,…
Read more
Wed. 25th September, 2013
TYPO3-EXT-SA-2013-016: SQL Injection vulnerability in extension Formhandler (formhandler)

Advisory type: TYPO3 Extensions
Created by Franz G. Jahn

It has been discovered that the extension "Formhandler" (formhandler) is vulnerable to SQL-Injection.
Read more

Security Advisories

TYPO3-EXT-SA-2014-005: Access Bypass in extensions "Yet Another Gallery" (yag) and "Tools for Extbase development" (pt_extbase)

TYPO3-EXT-SA-2014-004: Mass Assignment in extension Direct Mail Subscription (direct_mail_subscription)

TYPO3-EXT-SA-2014-003: Insecure Unserialize in extension News (tt_news)

TYPO3-EXT-SA-2014-002: Several vulnerabilities in third party extensions

TYPO3-EXT-SA-2014-001: Several vulnerabilities in extension mm_forum (mm_forum)

TYPO3-PSA-2014-001: Cross-Site Request Forgery Protection in TYPO3 CMS 6.2

TYPO3-CORE-SA-2013-004: Multiple Vulnerabilities in TYPO3 CMS

TYPO3-EXT-SA-2013-018: Several vulnerabilities in extension AWStats (cc_awstats)

TYPO3-EXT-SA-2013-017: Several vulnerabilities in third party extensions

TYPO3-EXT-SA-2013-016: SQL Injection vulnerability in extension Formhandler (formhandler)

Information

Downloads

Community

Popular links

Professional Content Management

Inspire people to share

A Community Effort

Do you have a question?

Security Advisories

Information

Downloads

Community

Popular links