Cross-Site Request Forgery in Backend User Module

Component Type: TYPO3 CMS Subcomponent: Backend User Module (ext:beuser) Release Date: January 14, 2025 Vulnerability Type: Cross-Site Request Forgery Affected Versions: 11.0.0-11.5.41,…

Inline Relational Record Editing (IRRE)

The functionality of Inline Relational Record Editing is shown in this diploma thesis using a case-study of a travel business which provides bookings for many hotels. A hotel consists of different…

TYPO3 Security Bulletin

Component Type: Third Party Extension. The extension is not part of the TYPO3 default installation Affected Components: chc_forum Versions: 1.4.4 and earlier Vulnerability Type: SQL injection…

TYPO3 Flow 2.0 beta 3 has been released

The fixed bugs touch role handling and lazy dependency injection, caused by recent changes, as well as some other issues. One of the last changes for beta 3 are changed dependencies and stability…

Several Vulnerabilities in TYPO3 Core

Component Type: TYPO3 Core Affected Versions: 4.5.0 up to 4.5.18, 4.6.0 up to 4.6.11, 4.7.0 up to 4.7.3 and development releases of the 6.0 branch. Vulnerability Types: Cross-Site Scripting,…

Privilege Escalation in TYPO3 CMS

Component Type: TYPO3 CMS Release Date: April 12, 2016 Vulnerable subcomponent: Version Vulnerability Type: Privilege Escalation Affected Versions: Versions 6.2.0 to 6.2.19, 7.6.0 to 7.6.4 and 8.0.0…

Cross-Site Scripting in TYPO3 Backend

Component Type: TYPO3 CMS Release Date: April 12, 2016 Vulnerable subcomponent: Backend Vulnerability Type: Cross-Site Scripting Affected Versions: Versions 6.2.0 to 6.2.19, 7.6.0 to 7.6.4 and 8.0.0…

Roadmap to TYPO3 4.2

After some time went by since the get together of the Core Team at T3DD07 and the release of TYPO3 4.1 we'd like to introduce you to the plans for TYPO3 4.2. As a result of an open brainstorming…

SQL Injection in dbal

Component Type: TYPO3 CMS Release Date: February 16, 2016 Vulnerable subcomponent: Dbal Vulnerability Type: SQL Injection Affected Versions: Versions 6.2.0 to 6.2.17 Severity: High Suggested CVSS…

Multiple Cross-Site Scripting vulnerabilities in TYPO3 backend

Component Type: TYPO3 CMS Release Date: December 15, 2015 Vulnerable subcomponent: Backend Vulnerability Type: Cross-Site Scripting Affected Versions: Versions 6.2.0 to 6.2.15, 7.0.0 to 7.6.0…

TYPO3 Agency Meetup Days 2015 – A report on the Vienna meeting

Participants This has been one of the largest meetups in 2015, with a total of 20 participants and 16 agencies being represented. Agenda The agenda has been formed by an introduction from Mathias…

SQL Injection in extension "http:BL Blocking" (mh_httpbl)

Release Date: September 30, 2015 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.1.7 and below Vulnerability Type:…

Arbitrary Code Execution in extension Frontend User Upload (feupload)

Release Date: June 15, 2015 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 0.5.0 and below Vulnerability Type:…

Budget Owner's Guide

Budget Owner’s Guide As a budget owner, you are responsible for your budget: Do not exceed your budget. We cannot cover expenses exceeding your budget, so you should make sure to keep track of all expenses. Keep your deadlines: In your budget…

Library for Extensions (lib)

ECT library as MVC alternative to tslib_pibase. Contains: autoloaders, controller, configurations, SPL data objects, phpView, translator. NG: typo3.teams.extension-coordination.

Show extension details Download ZIP of version 0.3.1 Extension documentation

GSA Socket (pt_gsasocket)

GSA Socket provides access to the additional (non TYPO3) GSA database tables required by GSA Shop (pt_gsashop) and all extensions of the General Shop Applications (GSA) category.

Show extension details Download ZIP of version 1.0.0 Extension documentation

FPDF Library (fpdf)

FPDF Library (www.fpdf.org) ported to TYPO3. Also includes the FPDI library (fpdi.setasign.de) which allows you to use PDF templates when creating your own PDF files.

Show extension details Download ZIP of version 0.2.2 Extension documentation

Project Tesseract (tesseract)

This projects covers a suite of extensions designed to facilitate the extraction of data and their display, using controllers and standard data formats. More info on http://www.typo3-tesseract.com/

Show extension details Download ZIP of version 2.1.0 Extension documentation

TGM Simple Google Map (tgm_simplegooglemap)

Remake of rgsimplegooglemaps. Very simple Google Maps extension for TYPO3. Not much features, easy and fast to configure. Features: map with markers from choosen page(s), simple directions request.

Show extension details Download ZIP of version 0.3.1 Extension documentation

Cookie Cuttr (cookie_cuttr)

Under EU cookie law - the legislation says websites have to get permission from users before storing pieces of information called cookies on their computers. I have tried to implement CookieCuttr with…

Show extension details Download ZIP of version 1.0.3 Extension documentation

Webcam stream reader (webcamstream)

This plugin can be used to display a webcam MJPEG stream. See http://doc.lingewoud.com/doku.php/en:doc:typo3:extension:webcamstream for documentation.

Show extension details Download ZIP of version 0.1.0

cHash checker (pp_chashchecker)

Checks the cHash validity even if it is not gived in URL. Should fix bug 4514 (with $TYPO3_CONF_VARS[FE][pageNotFoundOnCHashError] set to TRUE).

Show extension details Download ZIP of version 1.0.0

Several vulnerabilities in extension JobControl (dmmjobcontrol)

Release Date: September 25, 2014 Bulletin update: October 6, 2014 (added CVEs) Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions:…

Content Blocks in TYPO3 v13 LTS — Repository Moved to FriendsOfTYPO3

Content Blocks 1.0.0: A Stable Release and New Home With the release of TYPO3 version 13.4.0 LTS, we’ve introduced the first stable version of Content Blocks (version 1.0.0). Content Blocks has now…

Meet Volker Graubaum (part 1 of 3!), Chief Product Officer of TYPO3, Germany (Application Podcast S1E11)

We ended up talking a long time … This is part 1 of 3 episodes featuring Volker! Listen to the full interview in the audio player here, watch the interview video below, where you’ll also find a full…