Security Bulletins for TYPO3 Extensions

Thu. 25th August, 2011

TYPO3-EXT-SA-2011-004: Cross Site Scripting Vulnerability in extension Questionaire (pbsurvey)

Advisory type: TYPO3 Extensions

Created by Helmut Hummel

It has been discovered that the extension "Questionaire" (pbsurvey) is vulnerable to Cross-Site Scripting.

Thu. 25th August, 2011

Advisory type: TYPO3 Extensions

Created by Helmut Hummel

It has been discovered that the extension Formhandler (formhandler) is vulnerable to SQL-Injection and Cross-Site Scripting.

Wed. 3rd August, 2011

Advisory type: TYPO3 Extensions

Created by Helmut Hummel

It has been discovered that the extension Website Photo Gallery (jm_gallery) is vulnerable to SQL injection.

Mon. 25th July, 2011

Advisory type: TYPO3 Extensions

Created by Marcus Krause

It has been discovered that the extension phpMyAdmin (phpmyadmin) is vulnerable to Cross-Site Scripting, Local File Inclusion, Code Execution and…