TYPO3 Security Bulletins

Wed. 11th June, 2008

TYPO3-20080611-1: Multiple vulnerabilities in TYPO3 Core

Categories: TYPO3 CMS

Advisory type: Security Advisories

It has been discovered that the default value of the TYPO3 configuration variable fileDenyPattern allows arbitrary code execution on Apache web…

Tue. 27th May, 2008

TYPO3-20080527-2: SQL Injection in extension "Library for Frontend plugins" (sg_zfelib)

Advisory type: Security Advisories

It has been discovered that the extension "Library for Frontend plugins" (sg_zfelib) is susceptible to SQL Injections.

Tue. 27th May, 2008

SECURITY-BULLETIN-TYPO3-20080527-2-SQL-INJECTION-IN-EXTENSION-LIBRARY-FOR-FRONTEND-PLUGINS-SG-ZFELIB: Security Bulletin TYPO3-20080527-2: SQL Injection in extension "Library for Frontend plugins" (sg_zfelib)

Categories: Security

Advisory type: Security Advisories

Created by Henning Pingel

It has been discovered that the extension "Library for Frontend plugins" (sg_zfelib) is susceptible to SQL Injections.

Tue. 27th May, 2008

SECURITY-BULLETIN-TYPO3-20080527-1-CROSS-SITE-SCRIPTING-VULNERABILITY-IN-EXTENSION-KJ-IMAGE-LIGHTBOX-V2-KJ-IMAGELIGHTBOX2: Security Bulletin TYPO3-20080527-1: Cross Site Scripting vulnerability in extension "KJ: Image Lightbox v2" (kj_imagelightbox2)

Categories: Security

Advisory type: Security Advisories

Created by Henning Pingel

It has been discovered that the extension "KJ: Image Lightbox v2" (kj_imagelightbox2) is susceptible to Cross Site Scripting (XSS) attacks.

Tue. 27th May, 2008

TYPO3-20080527-1: Cross Site Scripting vulnerability in extension "KJ: Image Lightbox v2" (kj_imagelightbox2)

Advisory type: Security Advisories

It has been discovered that the extension "KJ: Image Lightbox v2" (kj_imagelightbox2) is susceptible to Cross Site Scripting (XSS) attacks.

Thu. 15th May, 2008

TYPO3-20080515-1: Multiple vulnerabilities in extension Frontend User Registration (sr_feuser_register)

Advisory type: Security Advisories

It has been discovered that the extension Frontend User Registration (sr_feuser_register) is susceptible to Cross Site Scripting (XSS) attacks and…

Thu. 15th May, 2008

TYPO3-20080515-2: Multiple vulnerabilities in extension Frontend Filemanager (air_filemanager)

Advisory type: Security Advisories

It has been discovered that the extension Frontend Filemanager (air_filemanager) is susceptible to Cross Site Scripting (XSS) attacks and allows…

Thu. 15th May, 2008

SECURITY-BULLETIN-TYPO3-20080515-2-MULTIPLE-VULNERABILITIES-IN-EXTENSION-FRONTEND-FILEMANAGER-AIR-FILEMANAGER: Security Bulletin TYPO3-20080515-2: Multiple vulnerabilities in extension Frontend Filemanager (air_filemanager)

Categories: Security

Advisory type: Security Advisories

Created by Henning Pingel

It has been discovered that the extension Frontend Filemanager (air_filemanager) is susceptible to Cross Site Scripting (XSS) attacks and allows…

Thu. 15th May, 2008

SECURITY-BULLETIN-TYPO3-20080515-1-MULTIPLE-VULNERABILITIES-IN-EXTENSION-FRONTEND-USER-REGISTRATION-SR-FEUSER-REGISTER: Security Bulletin TYPO3-20080515-1: Multiple vulnerabilities in extension Frontend User Registration (sr_feuser_register)

Categories: Security

Advisory type: Security Advisories

Created by Henning Pingel

It has been discovered that the extension Frontend User Registration (sr_feuser_register) is susceptible to Cross Site Scripting (XSS) attacks and…

Tue. 13th May, 2008

TYPO3-20080513-4: Multiple vulnerabilities in extension Statistics (ke_stats)

Advisory type: Security Advisories

It has been discovered that the extension Statistics (ke_stats) is vulnerable to Blind SQL Injection attacks. Also, a Cross Site Scripting issue has…

Security Advisories

TYPO3-20080611-1: Multiple vulnerabilities in TYPO3 Core

TYPO3-20080527-2: SQL Injection in extension "Library for Frontend plugins" (sg_zfelib)

SECURITY-BULLETIN-TYPO3-20080527-2-SQL-INJECTION-IN-EXTENSION-LIBRARY-FOR-FRONTEND-PLUGINS-SG-ZFELIB: Security Bulletin TYPO3-20080527-2: SQL Injection in extension "Library for Frontend plugins" (sg_zfelib)

SECURITY-BULLETIN-TYPO3-20080527-1-CROSS-SITE-SCRIPTING-VULNERABILITY-IN-EXTENSION-KJ-IMAGE-LIGHTBOX-V2-KJ-IMAGELIGHTBOX2: Security Bulletin TYPO3-20080527-1: Cross Site Scripting vulnerability in extension "KJ: Image Lightbox v2" (kj_imagelightbox2)

TYPO3-20080527-1: Cross Site Scripting vulnerability in extension "KJ: Image Lightbox v2" (kj_imagelightbox2)

TYPO3-20080515-1: Multiple vulnerabilities in extension Frontend User Registration (sr_feuser_register)

TYPO3-20080515-2: Multiple vulnerabilities in extension Frontend Filemanager (air_filemanager)

SECURITY-BULLETIN-TYPO3-20080515-2-MULTIPLE-VULNERABILITIES-IN-EXTENSION-FRONTEND-FILEMANAGER-AIR-FILEMANAGER: Security Bulletin TYPO3-20080515-2: Multiple vulnerabilities in extension Frontend Filemanager (air_filemanager)

SECURITY-BULLETIN-TYPO3-20080515-1-MULTIPLE-VULNERABILITIES-IN-EXTENSION-FRONTEND-USER-REGISTRATION-SR-FEUSER-REGISTER: Security Bulletin TYPO3-20080515-1: Multiple vulnerabilities in extension Frontend User Registration (sr_feuser_register)

TYPO3-20080513-4: Multiple vulnerabilities in extension Statistics (ke_stats)

Information

Downloads

Community

Popular links

Professional Content Management

Inspire people to share

A Community Effort

Do you have a question?

Security Advisories

Information

Downloads

Community

Popular links