TYPO3 Security Bulletin

Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 4.1.0 till 4.8.0 (including) Vulnerability Type: Broken Access Control…

TYPO3 Security Bulletin 20070719-1: Remote shell command execution in extensions embedding PHPMailer

Please read the entire security bulletin here: TYPO3 Security Bulletin TYPO3-20070719-1: Remote shell command execution in extensions embedding PHPMailer We also recommend that you subscribe to the…

SQL Injection in system extension indexed_search

Component Type: System extension, part of the TYPO3 default installation. Affected Versions: TYPO3 versions 3.x, 4.0 to 4.0.7, 4.1 to 4.1.3. Vulnerability Type: SQL Injection. Severity: Low. Problem…

TYPO3 4.5.12 and 4.6.5 released

The TYPO3 Community announces versions 4.5.12 and 4.6.5 of the TYPO3 Enterprise Content Management System. We are announcing the release of the following TYPO3 updates: TYPO3 4.5.12 TYPO3 4.6.5 All…

HTML5 Readykit (html5_readykit)

Configures Typo3 to render a valid HTML5 document using HTML5 Boilerplate, replaces the necessary tags, removes outdated attributes and sets default meta tags.

Show extension details Download ZIP of version 0.3.1 Extension documentation

wfGallery (wf_gallery)

Image Gallery. Uses images from a specified folder. Supports quadratic thumbnails (optional), image download (optional), Mootools Slimbox and more. Works with Typo3 4.2 and later.

Show extension details Download ZIP of version 1.0.4 Extension documentation

Simple logout button/link (dvs_simplelogout)

Provides a simple logout button or link for fe users. The default typo3 login/logout form (SYSEXT:felogin) doesnt work on protected pages. That is the only reason, this extension exists.

Show extension details Download ZIP of version 1.0.0 Extension documentation

Mandelbrot-Set (ch_mandelbrot)

Atari is not a Cray! Simple eID-Ajax-Mandelbrot example with a color-guess-engine for fast iteration and some experimental zoom functions. For Typo3 4.0.0.

Show extension details Download ZIP of version 0.0.4

SR GD Crop & Resize (srgd)

Crop and Resize with GD. Usefull when ImageMagick is not available on the hoster. Idea from jb_gd_resize Typo3 extension and Smart Image Resizer script. Report to web@sruegg.ch

Show extension details Download ZIP of version 2.0.2

Right-to-Left Backend (zor_rtl)

A must-have for Right-to-Left languages. This extension mirrors Backend interface direction from right to left if BE language is hebrew [he] or arabic [ar]. Suitable for Typo3 4.0.x

Show extension details Download ZIP of version 0.1.0

TYPO3 Update Check (t3updatecheck)

This extension makes it possible to automatically check for new TYPO3 updates against the sourceforge downloadable files. It will inform via email, if there are new updates available. Works with…

Show extension details Download ZIP of version 0.1.2 Extension documentation

Pipeline Magazine Creator (pipeline_pdf)

This extension generates PDFs of each page and stores them locally (not in cache). This Extension is needed to create the "Pipeline Magazine" (www.pipeline-project.org), and is intended for creating…

Show extension details Download ZIP of version 1.0.6 Extension documentation

Template, extension and security info (sysinfo)

Provides a backend module for showing which templates included where, which extensions actually used as well as a couple of security and performance checks. This supports Typo3 maintenance, migration…

Show extension details Download ZIP of version 3.0.4

TYPO3 Security Bulletin

Component Type: Core Affected Components: showpic.php Versions: TYPO3 3.8.0 and earlier Vulnerability Type: Cross Site Scripting Severity: High Problem Description: A Cross Site Scripting issue has…

TYPO3 in 80 characters

"Describe TYPO3 in max 80 characters. Use #typo3in80chars to win a prize on T3CON10. All entries have a chance!" Prizes will be drawn randomly from all entries that are used at the conference. Prizes…

SQL Injection in extension "URL redirect" (url_redirect)

Release Date: October 15, 2019 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: SQL Injection Affected Versions: 1.2.1 and…

Denial of Service in extension "Code Highlight" (codehighlight)

Release Date: March 16, 2021 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "Code Highlight" (codehighlight) Vulnerability Type:…

TYPO3 Camp Venlo, an event you don’t wanna miss

Developers will be challenged with the “Why equal doesn't equal" Quiz by Juliette Reinders. Also a challenge; the communication between developers and project managers. Speaker Howard Lettinga knows…

Multiple vulnerabilities in extension "femanager" (femanager)

Release Date: January 22, 2019 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Multiple vulnerabilities Affected Versions:…

SQL Injection in extension "phpmyadmin" (phpmyadmin)

Release Date: March 10, 2020 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: SQL Injection Affected Versions: 5.4.0 and below…

Remote Code Execution in extension "PHPUnit" (phpunit)

Release Date: March 10, 2020 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Remote Code Execution Affected Versions: 6.5.14…

TYPO3 CMS 4.5.25, 4.6.18, 4.7.10 and 6.0.4 released

We are announcing the releases of the following TYPO3 CMS updates: TYPO3 CMS 4.5.25 TYPO3 CMS 4.6.18 TYPO3 CMS 4.7.10 TYPO3 CMS 6.0.4 These versions are maintenance releases and contain bugfixes only.…

TYPO3 4.7 Release Candidate 2 released

As a last step in our roadmap towards TYPO3 4.7.0 we released the second Release Candidate for TYPO3 4.7 today. We are going to publish the final stable version on Tuesday 24th of April - which is…

April diary of the TYPO3 Association

The first weeks of the month have been focused on the preparation for the TYPO3 Dialogue Days 2015 and for the yearly General Assembly (GA). Stefan Busemann was strongly concentrated on the…

Mobile Redirect (cwmobileredirect)

Your all-in-one mobile device detection and redirection solution! Detects mobile browsers andredirects to other Typo3 sites in your setup (most likely optimized for mobiles). Allows to easily switch…

Show extension details Download ZIP of version 1.5.0 Extension documentation