Security Advisories

All Advisories

Subscribe to our Security Advisories Mailing List and receive Security Bulletins via E-Mail

Mon. 15th June, 2015
TYPO3-EXT-SA-2015-010: SQL Injection vulnerability in extension Smoelenboek (ncgov_smoelenboek)

Advisory type: TYPO3 Extensions
Created by Nicole Cordes

It has been discovered that the extension "Smoelenboek" (ncgov_smoelenboek) is susceptible to SQL Injection
Read more
Mon. 15th June, 2015
TYPO3-EXT-SA-2015-011: SQL Injection vulnerability in extension Developer Log (devlog)

Advisory type: TYPO3 Extensions
Created by Nicole Cordes

It has been discovered that the extension "Developer Log" (devlog) is susceptible to SQL Injection
Read more
Mon. 15th June, 2015
TYPO3-EXT-SA-2015-012: SQL Injection vulnerability in extension FAQ - Frequently Asked Questions (js_faq)

Advisory type: TYPO3 Extensions
Created by Nicole Cordes

It has been discovered that the extension "FAQ - Frequently Asked Questions" (js_faq) is susceptible to SQL Injection
Read more
Thu. 19th February, 2015
TYPO3-CORE-SA-2015-001: Authentication Bypass in TYPO3 CMS 4.5

Categories: TYPO3 CMS

Advisory type: TYPO3 CMS
Created by Helmut Hummel

It has been discovered that TYPO3 CMS 4.5.x is vulnerable to Authentication Bypass.
Read more
Tue. 17th February, 2015
TYPO3-PSA-2015-001: Important Security-Bulletin Pre-Announcement

Categories: Public Service Announcement

Advisory type: Public Service Announcements
Created by Helmut Hummel

A TYPO3 4.5.40 release containing a security fix will be published the day after tomorrow, Thursday 19th of February at about 10:00 am CET.
Read more
Tue. 17th February, 2015
TYPO3-EXT-SA-2015-005: Cross-Site Scripting in extension Gridelements (gridelements)

Advisory type: TYPO3 Extensions
Created by Nicole Cordes

It has been discovered that the extension "gridelements" (gridelements) is susceptible to Cross-Site Scripting
Read more
Fri. 16th January, 2015
TYPO3-EXT-SA-2015-004: Information Disclosure in Direct Mail Subscription (direct_mail_subscription)

Advisory type: TYPO3 Extensions
Created by Marcus Krause

It has been discovered that the extension "Direct Mail Subscription" (direct_mail_subscription) is susceptible to Information Disclosure.
Read more
Fri. 9th January, 2015
TYPO3-EXT-SA-2015-003: Multiple vulnerabilities in Content Rating Extbase (content_rating_extbase)

Advisory type: TYPO3 Extensions
Created by Marcus Krause

It has been discovered that the extension "Content Rating Extbase" (content_rating_extbase) is susceptible to Cross-Site Scripting and SQL Injection.
Read more
Fri. 9th January, 2015
TYPO3-EXT-SA-2015-002: Multiple vulnerabilities in Content Rating (content_rating)

Advisory type: TYPO3 Extensions
Created by Marcus Krause

It has been discovered that the extension "Content Rating" (content_rating) is susceptible to Cross-Site Scripting and SQL Injection.
Read more
Thu. 8th January, 2015
TYPO3-EXT-SA-2015-001: Improper Authentication in LDAP / SSO Authentication (ig_ldap_sso_auth)

Advisory type: TYPO3 Extensions
Created by Marcus Krause

It has been discovered that the extension "LDAP / SSO Authentication" (ig_ldap_sso_auth) is susceptible to Improper Authentication.
Read more

Security Advisories

TYPO3-EXT-SA-2015-010: SQL Injection vulnerability in extension Smoelenboek (ncgov_smoelenboek)

TYPO3-EXT-SA-2015-011: SQL Injection vulnerability in extension Developer Log (devlog)

TYPO3-EXT-SA-2015-012: SQL Injection vulnerability in extension FAQ - Frequently Asked Questions (js_faq)

TYPO3-CORE-SA-2015-001: Authentication Bypass in TYPO3 CMS 4.5

TYPO3-PSA-2015-001: Important Security-Bulletin Pre-Announcement

TYPO3-EXT-SA-2015-005: Cross-Site Scripting in extension Gridelements (gridelements)

TYPO3-EXT-SA-2015-004: Information Disclosure in Direct Mail Subscription (direct_mail_subscription)

TYPO3-EXT-SA-2015-003: Multiple vulnerabilities in Content Rating Extbase (content_rating_extbase)

TYPO3-EXT-SA-2015-002: Multiple vulnerabilities in Content Rating (content_rating)

TYPO3-EXT-SA-2015-001: Improper Authentication in LDAP / SSO Authentication (ig_ldap_sso_auth)

Information

Downloads

Community

Popular links

Professional Content Management

Inspire people to share

A Community Effort

Do you have a question?

Security Advisories

Information

Downloads

Community

Popular links