8. 

   chc_forum

   Component Type: Third Party Extension. This extension is third party code that has not been submitted to the TYPO3 extension review process yet. The extension is not part of TYPO3 default…

   Published: 7th November 2005 by Ekkehard Gümbel
9. 

   Environment Variable Injection in extension "AWS SDK for PHP" (aws_sdk_php)

   Release Date: August 9, 2018 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Environment Variable Injection Affected…

   Published: 9th August 2018 by Torben Hansen
10. 

    Cross-site scripting vulnerability in extension "Powermail" (powermail)

    Release Date: August 9, 2018 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Cross-site scripting Affected Versions: 2.25.2…

    Published: 9th August 2018 by Torben Hansen
11. 

    Environment Variable Injection in extension "Amazon AWS S3 FAL driver (CDN)" (aus_driver_amazon_s3)

    Release Date: August 9, 2018 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Environment Variable Injection Affected…

    Published: 9th August 2018 by Torben Hansen
12. 

    Cross-Site Scripting in extension "Heise Shariff" (rx_shariff)

    Release Date: August 9, 2018 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Cross-Site Scripting Affected Versions: 10.3.2…

    Published: 9th August 2018 by Torben Hansen
13. 

    Captcha bypass in extension "Front End User Registration" (sr_feuser_register)

    Release Date: August 9, 2018 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Captcha bypass Affected Versions: 5.0.0 and…

    Published: 9th August 2018 by Torben Hansen
14. 

    Missing Access Check in extension "Register to tt_address" (registeraddress)

    Release Date: August 9, 2018 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Missing Access Check Affected Versions: 1.0.6…

    Published: 9th August 2018 by Torben Hansen
15. 

    Blind SQL Injection vulnerability in extension Calendar Base (cal)

    Release Date: March 2, 2010 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.3.1 and all versions below Vulnerability…

    Published: 2nd March 2010 by Marcus Krause
16. 

    Multiple vulnerabilities in third party extensions

    Release Date: March 16, 2010 Please read first: This Collective Security Bulletin (CSB) is a listing of vulnerable extensions with neither significant download numbers, nor other special importance…

    Published: 16th March 2010 by Marcus Krause
17. 

    Cross-Site Scripting vulnerability in extension mm_forum (mm_forum)

    Release Date: March 16, 2010 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.8.2 and all versions below…

    Published: 16th March 2010 by Marcus Krause