Search

Diary of the TYPO3 Association (July / August 2016)

TYPO3 GmbH In the last two month we concentrated our work to form the TYPO3 GmbH. After the registration of its business into the register and finding office rooms, Mathias Schreiber (CEO, TYPO3 GmbH)…

Published: 15th September 2016 by Stefan Busemann
Cross-Site Scripting in TYPO3 Backend

Component Type: TYPO3 CMS Release Date: September 13, 2016 Vulnerability Type: Cross-Site Scripting Affected Versions: 6.2.0 to 6.2.26, 7.6.0 to 7.6.10 and 8.0.0 to 8.3.0 Severity: Low Suggested CVSS…

Published: 13th September 2016 by Georg Ringer
TYPO3 CMS 6.2.27, 7.6.11 and 8.3.1 released

We are announcing the release of the following TYPO3 CMS updates: TYPO3 CMS 6.2.27 LTS TYPO3 CMS 7.6.11 LTS TYPO3 CMS 8.3.1 All versions are maintenance releases and contain bug and security fixes.…

Published: 13th September 2016 by Oliver Hader
Arbitrary Code Execution in extension "Frontend User Registration" (sf_register)

Release Date: September 12, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 6.2.8 and below Vulnerability Type:…

Published: 12th September 2016 by Nicole Cordes
Denial of Service in extension "Speaking URLs for TYPO3" (realurl)

Release Date: September 8, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 2.0.0 to 2.0.14 Vulnerability Type:…

Published: 8th September 2016 by Helmut Hummel
New certification badges and print certificates

What's new Thanks to our Design Team, we finally can resolve the situation of only having badges for Certified Integrators. Every announced certification program will now have a badge, which is usable…

Published: 25th August 2016 by Pascal Dürsteler
move:elevator is a TYPO3 Platinum Member

Visible competence When companies are looking for agencies, it is often difficult for them to correctly assess the competencies from the outside. To create more transparency, there are - by now -…

Published: 4th August 2016 by Sonja Kostersitz
Extension key clean-up - update your typo3.org account

The typo3.org maintenance team is planning clean-up operations for the many unused extension keys. Currently there are over 15,000 extension keys which are still unused (meaning that there was no…

Published: 25th July 2016 by Thomas Löffler
June (2016) diary of the TYPO3 Association

2. June: TYPO3 Association supports Joomla J and Beyond e.V. is the legal entity behind the scenes of the German Joomla! Community and hosts JoomlaDay Germany and the popular international Joomla!…

Published: 21st July 2016 by Stefan Busemann
TYPO3 CMS 6.2.26, 7.6.10 and 8.2.1 released

We are announcing the release of the following TYPO3 CMS updates: TYPO3 CMS 6.2.26 LTS TYPO3 CMS 7.6.10 LTS TYPO3 CMS 8.2.1 All versions are maintenance releases and contain bug and critical security…

Published: 19th July 2016 by Oliver Hader
Cross-Site Scripting in third party library mso/idna-convert

Component Type: TYPO3 CMS Release Date: July 19, 2016 Vulnerability Type: Cross-Site Scripting Affected Versions: 7.6.0 to 7.6.9 and 8.0.0 to 8.2.0 Severity: Low Suggested CVSS v2.0:…

Published: 19th July 2016 by Helmut Hummel
Environment Variable Injection

Component Type: TYPO3 CMS Release Date: July 19, 2016 Vulnerability Type: Environment Variable Injection Affected Versions: Versions 8.0.0 to 8.2.0 Severity: Low related CVE: CVE-2016-5385 Problem…

Published: 19th July 2016 by Helmut Hummel
Information Disclosure in TYPO3 Backend

Component Type: TYPO3 CMS Release Date: July 19, 2016 Vulnerable subcomponent: Backend Vulnerability Type: Information Disclosure Affected Versions: Versions 6.2.0 to 6.2.25, 7.6.0 to 7.6.9 and 8.0.0…

Published: 19th July 2016 by Nicole Cordes
SQL Injection in TYPO3 Frontend Login

Component Type: TYPO3 CMS Release Date: July 19, 2016 Vulnerable subcomponent: Frontend Login Vulnerability Type: SQL Injection Affected Versions: Versions 6.2.0 to 6.2.25 and 7.6.0 to 7.6.9 Severity:…

Published: 19th July 2016 by Nicole Cordes
Insecure Unserialize in TYPO3 Import/Export

Component Type: TYPO3 CMS Release Date: July 19, 2016 Vulnerable subcomponent: Import/Export Vulnerability Type: Insecure Unserialize Affected Versions: Versions 6.2.0 to 6.2.25, 7.6.0 to 7.6.9 and…

Published: 19th July 2016 by Nicole Cordes
Cross-Site Scripting in TYPO3 Backend

Component Type: TYPO3 CMS Release Date: July 19, 2016 Vulnerable subcomponent: Backend Vulnerability Type: Cross-Site Scripting Affected Versions: Versions 6.2.0 to 6.2.25, 7.6.0 to 7.6.9 and 8.0.0 to…

Published: 19th July 2016 by Nicole Cordes
Insecure Unserialize in extension "Page path" (pagepath)

Release Date: July 7, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.0.3 and below Vulnerability Type:…

Published: 7th July 2016 by Nicole Cordes
Cross-Site Scripting in extension "CCDebug" (cc_debug)

Release Date: July 7, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.0.0 and below Vulnerability Type:…

Published: 7th July 2016 by Nicole Cordes
Crowdfunding features in TYPO3 v8 - ckeditor Integration

The goals set for TYPO3 v8 LTS, to be released in April 2017, have raised high expectations. While a lot of groundwork is being laid, TYPO3 association member Pixelant AB with their very active CEO…

Published: 7th July 2016 by Benni Mack
Releasing TYPO3 v8.2

The last eight weeks since the last sprint release have been mainly used to further push the integration of Doctrine DBAL as a database layer replacement. We’ve seen a lot of patches from a large…

Published: 5th July 2016 by TYPO3 CMS Core Team
Report on the Server Admin Team sprint in Hannover (May 2016)

Following the invitiation of our friends at bitmotion , the TYPO3 Server Admin Team came together at their great offices in Hannover during the weekend of May 20th-22th, 2016. Besides many discussions…

Published: 29th June 2016 by TYPO3 Server Admin Team
Cross-Site Scripting in extension "Bootstrap Package" (bootstrap_package)

Release Date: June 15, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 6.2.15 and below Vulnerability Type:…

Published: 15th June 2016 by Nicole Cordes
April & May (2016) diary of the TYPO3 Association

After a longer christmas break we are finally back with our regular reports. And in the meantime a lot positive stuff happened. 23. March - 3. April 2016 TYPO3 Association elections: The latest…

Published: 7th June 2016 by Stefan Busemann
TYPO3 Award, October 27 in Munich - CALL FOR NOMINATIONS

During the international TYPO3 Award, the who-is-who of the business will meet again to celebrate the best TYPO3 projects from agencies and customers. The awards ceremony will take place as a gala…

Published: 6th June 2016 by Juliane Steinmetz
Register now for a TYPO3 Agency Meetup 2016 near you!

The marketing team has now finished the preparation and schedule for the 2016 Agency Meetup Days. Register now for an event in your area. The Agency Meetup Days in 2014 and 2015 have been quite a…

Published: 2nd June 2016 by Bianca Niestroj

«
‹
....
41
42
43
44
45
46
47
48
49
50
....
›
»

Diary of the TYPO3 Association (July / August 2016)

Cross-Site Scripting in TYPO3 Backend

TYPO3 CMS 6.2.27, 7.6.11 and 8.3.1 released

Arbitrary Code Execution in extension "Frontend User Registration" (sf_register)

Denial of Service in extension "Speaking URLs for TYPO3" (realurl)

New certification badges and print certificates

move:elevator is a TYPO3 Platinum Member

Extension key clean-up - update your typo3.org account

June (2016) diary of the TYPO3 Association

TYPO3 CMS 6.2.26, 7.6.10 and 8.2.1 released

Cross-Site Scripting in third party library mso/idna-convert

Environment Variable Injection

Information Disclosure in TYPO3 Backend

SQL Injection in TYPO3 Frontend Login

Insecure Unserialize in TYPO3 Import/Export

Cross-Site Scripting in TYPO3 Backend

Insecure Unserialize in extension "Page path" (pagepath)

Cross-Site Scripting in extension "CCDebug" (cc_debug)

Crowdfunding features in TYPO3 v8 - ckeditor Integration

Releasing TYPO3 v8.2

Report on the Server Admin Team sprint in Hannover (May 2016)

Cross-Site Scripting in extension "Bootstrap Package" (bootstrap_package)

April & May (2016) diary of the TYPO3 Association

TYPO3 Award, October 27 in Munich - CALL FOR NOMINATIONS

Register now for a TYPO3 Agency Meetup 2016 near you!

Information

Downloads

Community

Popular links

Professional Content Management

Inspire people to share

A Community Effort

Do you have a question?

Information

Downloads

Community

Popular links