The inside story - weeks 20+21

Zap the Gremlins? Semi-Automatic Conversation? This sounds like great fun! As far as I have heard the people had some fun in the "Research and Development Workshop" - but most of all they brought back…

SQL Injection vulnerability in extension CoolURI (cooluri)

Release Date: February 19, 2012 Bulletin Update: November 06, 2014 (added CVE) Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions:…

Google Summer of Code 2010 Projects

For this years Summer of Code 152 Free and Open Source Software (FOSS) organizations were accepted. The TYPO3 community is proud to be among that list of organizations which reads like the who-is-who…

Cross-Site Scripting vulnerability in extension powermail for TYPO3 (powermail)

Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.6.4 and below Vulnerability Types: Cross-Site Scripting Severity:…

Vulnerability in TYPO3 Core

Component Type: TYPO3 Core Affected Versions: 4.3.0, 4.3.1 and 4.3.2 (+ development releases of 4.4 branch) Vulnerability Types: Remote Command Execution Overall Severity: Critical Release Date: April…

T3BRAND: Website Relaunch

Starting with the TYPO3.com and TYPO3.org websites a great leap forward has been made in communicating our new CI to the public. Both websites, which had remained virtuallly unchanged since their…

multiblog (multiblog)

A blog extension for TYPO3: complete Frontend editig of a blog, including several blog widgets, comment system, facebook, google and twitter sharing buttons and seo fields. Fully social individual…

Show extension details Download ZIP of version 1.0.1 Extension documentation

FE Autologin and Nested FE Groups (sg_feautologinnest)

OBSOLETE! In Typo3 4.0.2 permalogin is included in the core; For older Version use "core_permalogin" for upward-compatibility. OBSOLETE! Nested FE-Groups are in the core since 4.0.0; Lifetime for…

Show extension details Download ZIP of version 0.4.0 Extension documentation

CeBIT-Special: Become member, save the registration fee!

If you visit our booth at CeBIT and apply for your membership there, you will save the registration fee. Usually a new member of the TYPO3 Association has to pay a one time registration fee which is…

Multiple vulnerabilities in extension "DRC News Comment" (news_comment)

Release Date: December 18, 2017 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.0.7 and below Vulnerability Type:…

Cross Site-Scripting in extension "CAB FAL search" (falsearch)

Release Date: November 07, 2017 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 0.2.0 and below Vulnerability Type:…

Information Disclosure in third party extension "Frontend User registration"

Release Date: April 6, 2009 Component Type: Third party extension. This extension is not a part of a TYPO3 default installation. Affected Versions: 2.5.20 and all versions below Vulnerability Type:…

SQL Injection in extension "Event management and registration" (sf_event_mgt)

Release Date: April 10, 2017 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.8.0 and below Vulnerability Type: SQL…

Insecure Unserialize and SQL Injection in extension "Code Highlighter" (mh_code_highlighter)

Release Date: November 14, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.2.10 and below Vulnerability Type:…

A thousand+ certified integrators

The TYPO3 Certification Team is proud to announce that we have reached the mark of 1000 TYPO3 Certified Integrators. In fact, at the time of this writing, there are 1032 individuals that have…

Arbitrary Code Execution in extension "Frontend User Registration" (sf_register)

Release Date: September 12, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 6.2.8 and below Vulnerability Type:…

Five on six

During development on 5.0 last week I came to the point where I needed to implement some functionality doing string operations. As we don't want to fiddle around with the mbstring extension anymore it…

Multiple vulnerabilities in extension "Ajax mail subscription" (ods_ajaxmailsubscription)

Release Date: March 24, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.4.4 and below Vulnerability Type:…

This Month in TYPO3 - September 2018 - Issue #6

This Month in TYPO3 - September 2018 - Issue #6 The September edition is rather brief since everybody is busy preparing for the upcoming release of TYPO3 9 LTS, either by contributing to the TYPO3 core, updating extensions to be compatible with TYPO3…

Community Budget Idea Report: Implementing TYPO3 Rector and Fractor Rules (Q3/2024)

In the third quarter of 2024, I had the opportunity to work on implementing new TYPO3 Rector rules and enhancing Fractor. New TYPO3 Rector Rules I successfully migrated an additional rule for TYPO3…

French

Les TYPO3 Awards 2023 célèbrent l’excellence du CMS après quatre ans de pause Les meilleurs sites web et intranets conçus avec le CMS TYPO3 ont été célébrés au gala de remise des prix TYPO3 à Düsseldorf, en Allemagne. Parmi les 221 candidatures…

Mentorship

The International TYPO3 Mentorship Program The TYPO3 International Mentorship program brings TYPO3 to new countries. TYPO3 CMS is a performant, secure, and flexible CMS, well-suited for many types of projects. Through individual mentorship, we show…

SQL Injection vulnerability in extension wt_directory (wt_directory)

Release Date: June 15, 2015 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.4.1 and below Vulnerability Type: SQL…

Sensitive Data Exposure in extension "View frontend statistics" (view_statistics)

Release Date: November 17, 2020 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: View frontend statistics (view_statistics)…

Improper Access Control vulnerability in extension fal_sftp (fal_sftp)

Release Date: October 17, 2014 Bulletin Update: October 18, 2014 (added CVE) Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions:…