Security Advisories

All Advisories

Subscribe to our Security Advisories Mailing List and receive Security Bulletins via E-Mail

Thu. 24th March, 2016
TYPO3-EXT-SA-2016-009: Multiple vulnerabilities in extension "Ajax mail subscription" (ods_ajaxmailsubscription)

Advisory type: TYPO3 Extensions
Created by Nicole Cordes

It has been discovered that the extension "Ajax mail subscription" (ods_ajaxmailsubscription) is susceptible to Insecure Authentication and Session…
Read more
Thu. 10th March, 2016
TYPO3-EXT-SA-2016-008: SQL Injection in extension "Another simple gallery" (chgallery)

Advisory type: TYPO3 Extensions
Created by Nicole Cordes

It has been discovered that the extension "Another simple gallery" (chgallery) is susceptible to SQL Injection.
Read more
Thu. 10th March, 2016
TYPO3-EXT-SA-2016-007: Multiple vulnerabilities in extension phpMyAdmin (phpmyadmin)

Advisory type: TYPO3 Extensions
Created by Nicole Cordes

It has been discovered that the extension "phpMyAdmin" (phpmyadmin) is susceptible to unsafe comparison of XSRF/CSRF token, multiple full path…
Read more
Thu. 3rd March, 2016
TYPO3-EXT-SA-2016-006: Cross-Site Scripting in extension "Apache Solr for TYPO3" (solr)

Advisory type: TYPO3 Extensions
Created by Nicole Cordes

It has been discovered that the extension "Apache Solr for TYPO3" (solr) is susceptible to Cross-Site Scripting.
Read more
Thu. 3rd March, 2016
TYPO3-EXT-SA-2016-005: Cross-Site Scripting in extension "Extension Kickstarter" (kickstarter)

Advisory type: TYPO3 Extensions
Created by Nicole Cordes

It has been discovered that the extension "Extension Kickstarter" (kickstarter) is susceptible to Cross-Site Scripting.
Read more
Thu. 3rd March, 2016
TYPO3-EXT-SA-2016-004: Multiple vulnerabilities in extension "Fe user statistic" (festat)

Advisory type: TYPO3 Extensions
Created by Nicole Cordes

It has been discovered that the extension "Fe user statistic" (festat) is susceptible to Cross-Site Scripting, Insecure Unserialize and Information…
Read more
Thu. 3rd March, 2016
TYPO3-EXT-SA-2016-003: Cross-Site Scripting in extension "Google Sitemap" (enter_new_weeaar_googlesitemap)

Advisory type: TYPO3 Extensions
Created by Nicole Cordes

It has been discovered that the extension "Google Sitemap" (enter_new_weeaar_googlesitemap) is susceptible to Cross-Site Scripting.
Read more
Thu. 3rd March, 2016
TYPO3-EXT-SA-2016-002: Cross-Site Scripting in extension "List frontend users" (listfeusers)

Advisory type: TYPO3 Extensions
Created by Nicole Cordes

It has been discovered that the extension "List frontend users" (listfeusers) is susceptible to Cross-Site Scripting.
Read more
Thu. 3rd March, 2016
TYPO3-EXT-SA-2016-001: Information Disclosure in extension "UTOPIA" (ics_utopia)

Advisory type: TYPO3 Extensions
Created by Nicole Cordes

It has been discovered that the extension "UTOPIA" (ics_utopia) is susceptible to Information Disclosure.
Read more
Tue. 23rd February, 2016
TYPO3-CORE-SA-2016-008: Denial of Service attack possibility in TYPO3 component Indexed Search

Categories: TYPO3 CMS

Advisory type: TYPO3 CMS
Created by Nicole Cordes

It has been discovered, that TYPO3 is susceptible to a Denial of Service attack.
Read more

Security Advisories

TYPO3-EXT-SA-2016-009: Multiple vulnerabilities in extension "Ajax mail subscription" (ods_ajaxmailsubscription)

TYPO3-EXT-SA-2016-008: SQL Injection in extension "Another simple gallery" (chgallery)

TYPO3-EXT-SA-2016-007: Multiple vulnerabilities in extension phpMyAdmin (phpmyadmin)

TYPO3-EXT-SA-2016-006: Cross-Site Scripting in extension "Apache Solr for TYPO3" (solr)

TYPO3-EXT-SA-2016-005: Cross-Site Scripting in extension "Extension Kickstarter" (kickstarter)

TYPO3-EXT-SA-2016-004: Multiple vulnerabilities in extension "Fe user statistic" (festat)

TYPO3-EXT-SA-2016-003: Cross-Site Scripting in extension "Google Sitemap" (enter_new_weeaar_googlesitemap)

TYPO3-EXT-SA-2016-002: Cross-Site Scripting in extension "List frontend users" (listfeusers)

TYPO3-EXT-SA-2016-001: Information Disclosure in extension "UTOPIA" (ics_utopia)

TYPO3-CORE-SA-2016-008: Denial of Service attack possibility in TYPO3 component Indexed Search

Information

Downloads

Community

Popular links

Professional Content Management

Inspire people to share

A Community Effort

Do you have a question?

Security Advisories

Information

Downloads

Community

Popular links