Security Bulletins for TYPO3 Extensions

Tue. 19th February, 2013

TYPO3-EXT-SA-2013-003: SQL Injection vulnerability in extension CoolURI (cooluri)

Advisory type: TYPO3 Extensions

Created by Franz G. Jahn

It has been discovered that the extension "CoolURI" (cooluri) is vulnerable to SQL Injection.

Mon. 28th January, 2013

TYPO3-EXT-SA-2013-002: Several vulnerabilities in third party extensions

Advisory type: TYPO3 Extensions

Created by Franz G. Jahn

Several vulnerabilities have been found in the following third-party TYPO3 extensions: attacalendar, attacpetition, eu_subscribe, exinit_job_offer,…

Fri. 11th January, 2013

TYPO3-EXT-SA-2013-001: Several vulnerabilities in third party extensions

Advisory type: TYPO3 Extensions

Created by Georg Ringer

Several vulnerabilities have been found in the following third-party TYPO3 extensions: news, onetimeaccount, phpunit, div2007, t3mootools, t3jquery,…

Fri. 21st December, 2012

TYPO3-EXT-SA-2012-013: Several Vulnerabilities in extension commerce (commerce)

Advisory type: TYPO3 Extensions

Created by Markus Bucher

It has been discovered that the extension commerce (commerce) is vulnerable to Cross Site Scripting.

Thu. 25th October, 2012

TYPO3-EXT-SA-2012-012: Several Vulnerabilities in extension Formhandler (formhandler)

Advisory type: TYPO3 Extensions

Created by Georg Ringer

It has been discovered that the extension Formhandler (formhandler) is vulnerable to SQL-Injection and Cross-Site Scripting.

Wed. 8th August, 2012

TYPO3-EXT-SA-2012-011: Cross-site scripting vulnerability in extension powermail for TYPO3 (powermail)

Advisory type: TYPO3 Extensions

Created by Marcus Krause

It has been discovered that the extension "powermail" (powermail) is vulnerable to Cross-Site Scripting, SQL Injection and Arbitrary Code Execution.

Tue. 3rd July, 2012

TYPO3-EXT-SA-2012-010: Cross-site scripting vulnerability in extension Seminars (seminars)

Advisory type: TYPO3 Extensions

Created by Oliver Klee

It has been discovered that the extension "Seminars" (seminars) is vulnerable to cross-site scripting.

Thu. 7th June, 2012

TYPO3-EXT-SA-2012-009: Cross-site scripting vulnerability in extension powermail for TYPO3 (powermail)

Advisory type: TYPO3 Extensions

Created by Georg Ringer

It has been discovered that the extension "powermail" (powermail) is vulnerable to cross-site scripting.

Thu. 7th June, 2012

TYPO3-EXT-SA-2012-008: Cross-site scripting vulnerability in extension Ameos Formidable (ameos_formidable)

Advisory type: TYPO3 Extensions

Created by Oliver Klee

It has been discovered that the extension "Ameos Formidable" (ameos_formidable) is vulnerable to cross-site scripting.

Thu. 7th June, 2012

TYPO3-EXT-SA-2012-007: SQL Injection vulnerability in extension Basic SEO Features (seo_basics)

Advisory type: TYPO3 Extensions

Created by Markus Bucher

It has been discovered that the extension "Basic SEO Features" (seo_basics) is vulnerable to SQL Injection.