Security Advisories

All Advisories

Subscribe to our Security Advisories Mailing List and receive Security Bulletins via E-Mail

Thu. 15th September, 2011
TYPO3-EXT-SA-2011-011: Multiple XSS vulnerabilities in extension phpMyAdmin (phpmyadmin)

Advisory type: TYPO3 Extensions
Created by Marcus Krause

It has been discovered that the extension phpMyAdmin (phpmyadmin) is vulnerable to Cross-Site Scripting.
Read more
Wed. 14th September, 2011
MULTIPLE-SECURITY-ISSUES-FOUND-IN-TYPO3-CORE-4: Multiple security issues found in TYPO3 core

Categories: Security

Advisory type: Security Advisories
Created by Helmut Hummel

It has been discovered that improper error handling could lead to cache flooding in TYPO3 Core and that the prepared statement database API…
Read more
Wed. 14th September, 2011
TYPO3-CORE-SA-2011-003: Improper error handling could lead to cache flooding in TYPO3 Core

Categories: TYPO3 CMS

Advisory type: TYPO3 CMS
Created by Helmut Hummel

It has been discovered that TYPO3 is susceptible to Cache Flooding
Read more
Wed. 14th September, 2011
TYPO3-CORE-SA-2011-002: Potential SQL injection vulnerability in TYPO3 Core

Categories: TYPO3 CMS

Advisory type: TYPO3 CMS
Created by Helmut Hummel

It has been discovered that the TYPO3 prepared statement database API allows SQL Injections.
Read more
Wed. 7th September, 2011
SECURITY-ISSUES-IN-THIRD-PARTY-TYPO3-EXTENSIONS-4: Security issues in third-party TYPO3 extensions

Categories: Security

Advisory type: Security Advisories
Created by Helmut Hummel

Security vulnerabilities have been discovered in third-party TYPO3 extensions:

direct_mail_subscription, rgsmoothgallery, th_mailformplus,…
Read more
Wed. 7th September, 2011
TYPO3-EXT-SA-2011-009: Several Vulnerabilities in extension MailformPlus (th_mailformplus)

Advisory type: TYPO3 Extensions
Created by Georg Ringer

Several vulnerabilities have been found in the following third-party TYPO3 extension: th_mailformplus
Read more
Wed. 7th September, 2011
TYPO3-EXT-SA-2011-008: Several Vulnerabilities in extension SmoothGallery for TYPO3 (rgsmoothgallery)

Advisory type: TYPO3 Extensions
Created by Georg Ringer

Several vulnerabilities have been found in the following third-party TYPO3 extension: rgsmoothgallery
Read more
Wed. 7th September, 2011
TYPO3-EXT-SA-2011-007: Several Vulnerabilities in extension Direct Mail Subscription (direct_mail_subscription)

Advisory type: TYPO3 Extensions
Created by Georg Ringer

Several vulnerabilities have been found in the following third-party TYPO3 extension: direct_mail_subscription
Read more
Wed. 7th September, 2011
TYPO3-EXT-SA-2011-010: A vulnerability in extension Drag Drop Mass Upload (ameos_dragndropupload)

Advisory type: TYPO3 Extensions
Created by Georg Ringer

A vulnerability has been found in the following third-party TYPO3 extension: ameos_dragndropupload
Read more
Mon. 29th August, 2011
SECURITY-ISSUES-IN-THIRD-PARTY-TYPO3-EXTENSIONS-5: Security issues in third-party TYPO3 extensions

Categories: Security

Advisory type: Security Advisories
Created by Helmut Hummel

Security vulnerabilities have been discovered in third-party TYPO3 extensions: MM DAM - FEFileList (mm_dam_filelist), Events (julle_events), WEC Staff…
Read more

Security Advisories

TYPO3-EXT-SA-2011-011: Multiple XSS vulnerabilities in extension phpMyAdmin (phpmyadmin)

MULTIPLE-SECURITY-ISSUES-FOUND-IN-TYPO3-CORE-4: Multiple security issues found in TYPO3 core

It has been discovered that improper error handling could lead to cache flooding in TYPO3 Core and that the prepared statement database API…

TYPO3-CORE-SA-2011-003: Improper error handling could lead to cache flooding in TYPO3 Core

TYPO3-CORE-SA-2011-002: Potential SQL injection vulnerability in TYPO3 Core

SECURITY-ISSUES-IN-THIRD-PARTY-TYPO3-EXTENSIONS-4: Security issues in third-party TYPO3 extensions

Security vulnerabilities have been discovered in third-party TYPO3 extensions:

TYPO3-EXT-SA-2011-009: Several Vulnerabilities in extension MailformPlus (th_mailformplus)

TYPO3-EXT-SA-2011-008: Several Vulnerabilities in extension SmoothGallery for TYPO3 (rgsmoothgallery)

TYPO3-EXT-SA-2011-007: Several Vulnerabilities in extension Direct Mail Subscription (direct_mail_subscription)

TYPO3-EXT-SA-2011-010: A vulnerability in extension Drag Drop Mass Upload (ameos_dragndropupload)

SECURITY-ISSUES-IN-THIRD-PARTY-TYPO3-EXTENSIONS-5: Security issues in third-party TYPO3 extensions

Security vulnerabilities have been discovered in third-party TYPO3 extensions: MM DAM - FEFileList (mm_dam_filelist), Events (julle_events), WEC Staff…

Information

Downloads

Community

Popular links

Professional Content Management

Inspire people to share

A Community Effort

Do you have a question?

Security Advisories

It has been discovered that improper error handling could lead to cache flooding in TYPO3 Core and that the prepared statement database API…

Security vulnerabilities have been discovered in third-party TYPO3 extensions:

Security vulnerabilities have been discovered in third-party TYPO3 extensions: MM DAM - FEFileList (mm_dam_filelist), Events (julle_events), WEC Staff…

Information

Downloads

Community

Popular links