Security Bulletin TYPO3-20050812-1

Component Type: Extension Affected Component: cc_awstats (and possibly others) Version: 0.9.0 and earlier Vulnerability Type: Remote Exploit Severity: Medium Problem Description: Remote exploitation…

Security Bulletin TYPO3-20050822-1

Security Bulletin TYPO3-20051010-1: fe_news

A fix is available for fe_rtenews, while fe_news has been removed from the TER. Please see the complete Bulletin for details.

Security Bulletin TYPO3-20060501-1: chc_forum

Component Type: Third Party Extension. The extension is not part of the TYPO3 default installation Affected Components: chc_forum Versions: 1.4.4 and earlier Vulnerability Type: SQL injection…

Security Bulletin TYPO3-20060902-1: tip-a-friend

Component Type: Third Party Extension. The extension is not part of the TYPO3 default installation Affected Components: tipafriend Versions: 1.2.1 and earlier Vulnerability Type: Cross Site Scripting…

Security Bulletin TYPO3-20060911-1: indexed search

Component Type: System Extension This Extension is Part of the TYPO3 default installation Affected Components: Indexed Search Versions: 2.9.0 under TYPO3 4.x Vulnerability Type: Cross Site Scripting…

Security Bulletin TYPO3-20061010-1: fe_adminLib.inc

Affected Versions: ALL Vulnerability Type: cross Site Scripting (XSS) Severity: minor Problem Description: The "backURL" parameter is not escaped correctly. A prepared URL could potentially contain…

Security Bulletin TYPO3-20080416-1: Multiple vulnerabilities in extension de_phpot

Please read the entire security bulletin here: Security Bulletin TYPO3-20080416-1: Multiple vulnerabilities in extension de_phpot We also recommend that you subscribe to the TYPO3 Announce List ,…

Security Bulletin TYPO3-20080416-2: SQL Injections in extensions pmk_rssnewsexport and cm_rdfexport

Please read the entire security bulletin here: Security Bulletin TYPO3-20080416-2: SQL Injections in extensions pmk_rssnewsexport and cm_rdfexport We also recommend that you subscribe to the TYPO3…

Security Bulletin TYPO3-20080505-1: Multiple vulnerabilities in extension MailformPlus (th_mailformplus)

Please read the entire security bulletin here: Security Bulletin TYPO3-20080505-1: Multiple vulnerabilities in extension MailformPlus (th_mailformplus) We also recommend that you subscribe to the…

Security Bulletin TYPO3-20080505-2: Cross Site Scripting vulnerability in extension powermail

Please read the entire security bulletin here: Security Bulletin TYPO3-20080505-2: Cross Site Scripting vulnerability in extension powermail We also recommend that you subscribe to the TYPO3 Announce…

Security Bulletin TYPO3-20080513-1: Multiple vulnerabilities in extension WT Gallery (wt_gallery)

Please read the entire security bulletin here: Security Bulletin TYPO3-20080513-1: Multiple vulnerabilities in extension WT Gallery (wt_gallery) We also recommend that you subscribe to the TYPO3…

Security Bulletin TYPO3-20080513-2: Cross Site Scripting vulnerability in extension Questionaire (pbsurvey)

Please read the entire security bulletin here: Security Bulletin TYPO3-20080513-2: Cross Site Scripting vulnerability in extension Questionaire (pbsurvey) We also recommend that you subscribe to the…

Security Bulletin TYPO3-20080513-4: Multiple vulnerabilities in extension Statistics (ke_stats)

Please read the entire security bulletin here: Security Bulletin TYPO3-20080513-4: Multiple vulnerabilities in extension Statistics (ke_stats) We also recommend that you subscribe to the TYPO3…

Security Bulletin TYPO3-20080515-1: Multiple vulnerabilities in extension Frontend User Registration (sr_feuser_register)

Please read the entire security bulletin here: Security Bulletin TYPO3-20080515-1: Multiple vulnerabilities in extension Frontend User Registration (sr_feuser_register) We also recommend that you…

Security Bulletin TYPO3-20080515-2: Multiple vulnerabilities in extension Frontend Filemanager (air_filemanager)

Please read the entire security bulletin here: Security Bulletin TYPO3-20080515-2: Multiple vulnerabilities in extension Frontend Filemanager (air_filemanager) We also recommend that you subscribe to…

Security Bulletin TYPO3-20080527-1: Cross Site Scripting vulnerability in extension "KJ: Image Lightbox v2" (kj_imagelightbox2)

Please read the entire Security Bulletin here: Security Bulletin TYPO3-20080527-1: Cross Site Scripting vulnerability in extension "KJ: Image Lightbox v2" (kj_imagelightbox2) We also recommend that…

Security Bulletin TYPO3-20080527-2: SQL Injection in extension "Library for Frontend plugins" (sg_zfelib)

Please read the entire Security Bulletin here: Security Bulletin TYPO3-20080527-2: SQL Injection in extension "Library for Frontend plugins" (sg_zfelib) We also recommend that you subscribe to the…

Security Bulletin TYPO3-20080611-1: Multiple vulnerabilities in TYPO3 Core

Please read the entire Security Bulletin here: Security Bulletin TYPO3-20080611-1: Multiple vulnerabilities in TYPO3 Core We also recommend that you subscribe to the TYPO3 Announce List to receive all…

Security Bulletin TYPO3-20080619-1: Several vulnerabilities have been found in TYPO3 third party extensions

This Collective Security Bulletin (CSB) is a listing of vulnerable extensions with neither significant download numbers nor other special importance amongst the TYPO3 Community. The intention of CSBs…

Security Bulletin TYPO3-20080916-1: Code execution vulnerability in extension phpMyAdmin

Please read the entire Security Bulletin here: TYPO3 Security Bulletin TYPO3-20080916-1: Code execution vulnerability in extension phpMyAdmin (phpmyadmin) We also recommend that you subscribe to the…

Security Bulletin TYPO3-20080919-1: Multiple third party extensions found insecure

Please follow the below link in order to read the entire security bulletin covering all 11 extensions. TYPO3-20080919-1: Collective Security Bulletin covering issues in 11 third party extensions:…

Security Bulletins: Important Security Enhancements in TYPO3 3.8.1

Over the years, TYPO3 has become very mature in many respects, one of which is the seriousness that is being put on security matters. Therefore the current release 3.8.1 contains some improvements as…

Security Bulletins: chc_forum, th_mailformplus

TYPO3-20051107-1 : A bug has been discovered in the "CHC Forum" (chc_forum) extension where some Javascript expressions are not properly caught when entered in forms. Thus, specially crafted entries…

Security Bypass Vulnerability in extension powermail (powermail)

Release Date: June 03, 2013 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.6.9 and below, 2.0.1 - 2.0.6…