The Extbase Team has been busy - what’s new?

After taking lead position of the Extbase Team from Patrick Lobacher Felix Oertel has really been pushing forward. The main agenda for the entire Extbase Team is converging further with FLOW3 for…

TYPO3 Flow 2.0 beta 3 has been released

The fixed bugs touch role handling and lazy dependency injection, caused by recent changes, as well as some other issues. One of the last changes for beta 3 are changed dependencies and stability…

Cross-Site Scripting and Remote Code Execution Vulnerability in TYPO3 Core

Component Type: TYPO3 Core Vulnerability Types: Cross-Site Scripting, Remote Code Execution Overall Severity: Critical Release Date: July 30, 2013 Vulnerable subcomponent: Third Party Libraries used…

Information Disclosure due to Out-of-scope Site Resolution

Component Type: TYPO3 CMS Subcomponent: URL Routing (ext:core) Release Date: July 25, 2023 Vulnerability Type: Information Disclosure Affected Versions: 9.4.0-9.5.41, 10.0.0-10.4.38, 11.0.0-11.5.29,…

Inline Relational Record Editing (IRRE)

The functionality of Inline Relational Record Editing is shown in this diploma thesis using a case-study of a travel business which provides bookings for many hotels. A hotel consists of different…

TYPO3 Security Bulletin

Component Type: Third Party Extension. The extension is not part of the TYPO3 default installation Affected Components: chc_forum Versions: 1.4.4 and earlier Vulnerability Type: SQL injection…

Structured Content Initiative—What Happened Between July and November?

The Structured Content Initiative is the core Strategic Initiative focused on improving the content editing user experience in TYPO3 CMS. Read our last update to learn more about what we’ve been…

TYPO3 Association releases Version 4.2: Focus on Usability and Performance Improvements

In addition, the new TYPO3 version now requires at least PHP 5.2.0 in order to run. PHP 4 has served the web developer community for over seven years, but its time has passed. PHP 5 was released three…

Arbitrary Code Execution and Cross-Site Scripting in Backend API

Component Type: TYPO3 CMS Vulnerable subcomponent: Backend API (ext:backend) Release Date: June, 25th Vulnerability Type: Arbitrary Code Execution, Cross-Site Scripting Affected Versions: 8.0.0-8.7.26…

Library for Extensions (lib)

ECT library as MVC alternative to tslib_pibase. Contains: autoloaders, controller, configurations, SPL data objects, phpView, translator. NG: typo3.teams.extension-coordination.

Show extension details Download ZIP of version 0.3.1 Extension documentation

GSA Socket (pt_gsasocket)

GSA Socket provides access to the additional (non TYPO3) GSA database tables required by GSA Shop (pt_gsashop) and all extensions of the General Shop Applications (GSA) category.

Show extension details Download ZIP of version 1.0.0 Extension documentation

FPDF Library (fpdf)

FPDF Library (www.fpdf.org) ported to TYPO3. Also includes the FPDI library (fpdi.setasign.de) which allows you to use PDF templates when creating your own PDF files.

Show extension details Download ZIP of version 0.2.2 Extension documentation

Project Tesseract (tesseract)

This projects covers a suite of extensions designed to facilitate the extraction of data and their display, using controllers and standard data formats. More info on http://www.typo3-tesseract.com/

Show extension details Download ZIP of version 2.1.0 Extension documentation

TGM Simple Google Map (tgm_simplegooglemap)

Remake of rgsimplegooglemaps. Very simple Google Maps extension for TYPO3. Not much features, easy and fast to configure. Features: map with markers from choosen page(s), simple directions request.

Show extension details Download ZIP of version 0.3.1 Extension documentation

Cookie Cuttr (cookie_cuttr)

Under EU cookie law - the legislation says websites have to get permission from users before storing pieces of information called cookies on their computers. I have tried to implement CookieCuttr with…

Show extension details Download ZIP of version 1.0.3 Extension documentation

Webcam stream reader (webcamstream)

This plugin can be used to display a webcam MJPEG stream. See http://doc.lingewoud.com/doku.php/en:doc:typo3:extension:webcamstream for documentation.

Show extension details Download ZIP of version 0.1.0

cHash checker (pp_chashchecker)

Checks the cHash validity even if it is not gived in URL. Should fix bug 4514 (with $TYPO3_CONF_VARS[FE][pageNotFoundOnCHashError] set to TRUE).

Show extension details Download ZIP of version 1.0.0

TYPO3 v11 LTS End of Free Support

The TYPO3 v11 journey started with the first sprint release, TYPO3 version 11.0 (Ready for Liftoff) , on 22 December 2020. A total of four sprint releases followed, plus the long-term support release…

T3BOARD13 confirmed to be back in Austria, Schmittenhöhe, Zell am See, 15.02.2013 - 22.02.2013

The price for the week inclusive half-board and skipass will be about 700 euros. Exact details will be published here as soon as we have it. Registration will start in September 2012. We'll have about…

Several Vulnerabilities in TYPO3 Core

Component Type: TYPO3 Core Affected Versions: 4.5.0 up to 4.5.18, 4.6.0 up to 4.6.11, 4.7.0 up to 4.7.3 and development releases of the 6.0 branch. Vulnerability Types: Cross-Site Scripting,…

Roadmap to TYPO3 4.2

After some time went by since the get together of the Core Team at T3DD07 and the release of TYPO3 4.1 we'd like to introduce you to the plans for TYPO3 4.2. As a result of an open brainstorming…

Privilege Escalation in TYPO3 CMS

Component Type: TYPO3 CMS Release Date: April 12, 2016 Vulnerable subcomponent: Version Vulnerability Type: Privilege Escalation Affected Versions: Versions 6.2.0 to 6.2.19, 7.6.0 to 7.6.4 and 8.0.0…

Cross-Site Scripting in TYPO3 Backend

Component Type: TYPO3 CMS Release Date: April 12, 2016 Vulnerable subcomponent: Backend Vulnerability Type: Cross-Site Scripting Affected Versions: Versions 6.2.0 to 6.2.19, 7.6.0 to 7.6.4 and 8.0.0…

Budget Owner's Guide

Budget Owner’s Guide As a budget owner, you are responsible for your budget: Do not exceed your budget. We cannot cover expenses exceeding your budget, so you should make sure to keep track of all expenses. Keep your deadlines: In your budget…

SQL Injection in dbal

Component Type: TYPO3 CMS Release Date: February 16, 2016 Vulnerable subcomponent: Dbal Vulnerability Type: SQL Injection Affected Versions: Versions 6.2.0 to 6.2.17 Severity: High Suggested CVSS…