Cross Site-Scripting in extension "Multishop" (multishop)

Release Date: November 07, 2017 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 5.0.0 and below Vulnerability Type:…

Cross Site-Scripting in extension "Formhandler" (formhandler)

Release Date: November 07, 2017 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 2.4.0 and below Vulnerability Type:…

TYPO3 4.6beta1 released

Today the TYPO3 community released the first beta version of TYPO3 4.6, in sync with our roadmap. Today the TYPO3 community released the first beta version of TYPO3 4.6. This is a developer "snapshot"…

Security Misconfiguration in Install Tool Cookie

Component Type: TYPO3 CMS Vulnerable subcomponent: Install Tool Session Handling Release Date: December 11, 2018 Vulnerability Type: Security Misconfiguration Affected Versions: 7.0.0-7.6.31,…

SQL Injection in extension "Faceted Search" (ke_search)

Release Date: May xx, 2017 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 2.4.1 and below Vulnerability Type: SQL…

Blind SQL Injection vulnerability in extension "powermail" (powermail)

Release Date: May 11, 2011 ( Version 1 ) Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.6.0, 1.6.1 and 1.6.2…

Next Bug Day: January 14

The January 2011 Bug Day will take place earlier than usual so that it can still happen before the release of the final version of TYPO3 4.5. So make a note in your agendas in order not to miss. We…

Livestat frame (livestatframe)

This is NOT a statistic module or similar. This extension only loads an external HTML source in the "content" frame of the Typo3 backend via a HTTP GET call. Here we load the current users…

Show extension details Download ZIP of version 0.0.2 Extension documentation

DAM compatibility layer (dam_compat)

Extension for TYPO3 6.2 which provides important DAM API methods as Facades utilizing the FAL. Should be installed into typo3conf/ext/dam in order to seamlessly replace DAM and allow other extensions…

Show extension details Download ZIP of version 1.3.3 Extension documentation

PowerSearch Index Lucene (powersearchindexlucene)

PowerSearch is an extensible, powerful search framework to index typo3 content, files (pdf/txt/doc) and other sources out of the box. It consists of the framework module (PowerSearch), the indexer and…

Show extension details Download ZIP of version 1.0.4 Extension documentation

TYPO3 sitemap crawler (sitecrawler)

This extension provides a Symfony command to crawl any sitemap including all sub sitemaps. It gathers all available urls and then calls each url. This way you can warm up the TYPO3 page cache. Any…

Show extension details Download ZIP of version 3.0.0 Extension documentation

T3DD10: SCOTTY Workshop

Recently more and more tagging solutions have been published. By the sheer number of more or less generic category and tagging attempts it becomes evident that there is a need to find a more flexible…

Spanish

Lanzamos TYPO3 v10 LTS — funcionalidades nuevas, mayor rendimiento, y una experiencia de usuario única a bordo La Comunidad de TYPO3 ha lanzado una nueva versión con Soporte a Largo Plazo (LTS, Long Term Support) del Sistema de Gestión de Contenidos…

Danish

TYPO3 Guidebook udgives til internationalt publikum Publiceres den 20. december 2020. Fås både på print og som e-bog. TYPO3 Association annoncerer udgivelsen af en omfattende begynderguide til webproduktion med TYPO3 CMS. Guidebogen udgives af det…

Unrestricted File Upload in File Abstraction Layer

Component Type: TYPO3 CMS Subcomponent: File Abstraction Layer (ext:core) Release Date: May 20, 2025 Vulnerability Type: Security Misconfiguration Affected Versions: 9.0.0-9.5.50, 10.0.0-10.4.49,…

Report on the combined server / typo3.org / design / documentation Team Sprint in Basel (November 2016)

2017 is only a month old, yet four teams have already had their first team sprint during 3 days. The sprint took place on January 16-18, 2017 at the Faculty of Business and Economics (Link to…

Industry Membership

TYPO3 Association Industry Memberships For companies and within these industries: Aerospace and defense Automation and robotics Construction and infrastructure Industrial services Manufacturing Mining and resource extraction Renewable energy and…

Call for papers for the TYPO3 Conference 2015

Baar, 2015-04-29 - This year's TYPO3 Conference Europe, T3CON, will take place in Amsterdam, Netherlands, on 21 and 22 October. In 2015, the world's largest event for the TYPO3 community will once…

Arbitrary Code Execution in extension "MK Forms" (mkforms)

Release Date: September 30, 2015 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.0.23 and below Vulnerability Type:…

Cross-Site Scripting in extension "404 Page not found handling" (pagenotfoundhandling)

Release Date: June 29, 2015 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 2.1.0 and below Vulnerability Type:…

SQL Injection vulnerability in extension FAQ - Frequently Asked Questions (js_faq)

Release Date: June 15, 2015 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.2.0 and below Vulnerability Type: SQL…

SQL Injection vulnerability in extension Smoelenboek (ncgov_smoelenboek)

Release Date: June 15, 2015 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.0.8 and below Vulnerability Type: SQL…

TYPO3 Usergroup Romania Meetup 2012

If the weather would have been better (it was snowing heavily that weekend) there would have been more attendants from other cities. There were a lot of people that expressed their desire to attend…

Information Disclosure in Direct Mail Subscription (direct_mail_subscription)

Release Date: January 16, 2015 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: 2.0.1 Vulnerability Type: Information…

Improper Authentication in LDAP / SSO Authentication (ig_ldap_sso_auth)

Release Date: January 8, 2015 Bulletin Update: January 8, 2015 (Affected Versions, Severity); February 23, 2015 (added CVE) Component Type: Third party extension. This extension is not a part of the…