Security Bulletin TYPO3-20080619-1: Several vulnerabilities have been found in TYPO3 third party extensions

This Collective Security Bulletin (CSB) is a listing of vulnerable extensions with neither significant download numbers nor other special importance amongst the TYPO3 Community. The intention of CSBs…

You, me, and TYPO3!

You, me, and TYPO3! Always wanted to know who make up this great community that everybody is talking about? You, me, and TYPO3! is a interview series introducing fantastic people that are part of the community - just by being themselves, and being…

Cross-Site Scripting in extension "Fluid Components" (fluid_components)

Release Date: March 22, 2023 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "Fluid Components" (fluid_components) Composer Package…

Sponsor a TYPO3 Code Sprint

What is a code sprint? A code sprint is made up of hard work and dedication for the TYPO3 project. Whether it is for TYPO3 CMS or for TYPO3 Neos or for that matter for any topic related to supporting…

Calling All TYPO3 Enthusiasts: Share Your Sales Experiences!

The need for official sales enablement materials for TYPO3 have been raised multiple times. With a Marketing Team bigger and better staffed than ever before, we want to tackle this topic and create…

Security issue in third party TYPO3 extension powermail

For further information on the issue in the extension powermail, please read the related advisory TYPO3-SA-2010-021 that was published today:…

Security issue in third party TYPO3 extension powermail

For further information on the issue in the extension powermail, please read the related advisory TYPO3-SA-2010-019 that was published today:…

TYPO3 9 Release Notes

TYPO3 v9 LTS Release Notes Site Handling Introduced in version 9.2 The most notable new feature in TYPO3 version 9.2 is the Site Handling functionality. Already introduced in version 9.1, the Site Management module in the backend of TYPO3 now…

Several Vulnerabilities in extension Formhandler (formhandler)

Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 0.9.14 and below Vulnerability Types: SQL Injection, Cross-Site…

SQL Injection vulnerability in extension Formhandler (formhandler)

Release Date: September 25, 2013 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Version: 1.6.1 and alll versions below Vulnerability…

SQL Injection vulnerability in extension RealURL: speaking paths for TYPO3 (realurl)

Release Date: September 25, 2013 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.12.6 and below Vulnerability Type:…

February's diary of the TYPO3 Association

2 February: Strategy Workshop in Frankfurt On February 2nd members of the Board and of the Expert Advisory Board (EAB) of the TYPO3 Association (T3A) met in Frankfurt for a strategy workshop. The aim…

Information disclosure vulnerabilities in extension "Front End User Registration" (sr_feuser_register)

Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 2.6.1 and below Vulnerability Type: Information disclosure Severity:…

Several Vulnerabilities in extension SmoothGallery for TYPO3 (rgsmoothgallery)

Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.5.1 and below Vulnerability Types: Cross-Site Scripting, Information…

Several Vulnerabilities in extension Direct Mail Subscription (direct_mail_subscription)

Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.1.0 and below Vulnerability Types: SQL Injection, Cross-Site…

Codesprint: Waalwijk and Venlo Camp make for a great week in april

Our dutch friends are good for an outstanding contributing experience in April: they offer a sprint- and camp combination. MaxServ will host the TYPO3 codesprint 18.4 - 21.4 in Waalwijk, where the…

Initiatives

TYPO3 Core Development - Strategic Initiatives An “initiative” consists of people with a common interest to make long-term improvements in a specific area of TYPO3 including strategic plans, goals, task-breakdown and monitoring of progress. These…

Vulnerabilitiy in extension Frontend User Registration (sr_feuser_register)

Component Type: Third party extension. This extensions is not part of the TYPO3 default installation. Affected Versions: Version 2.5.24 and all versions below. Vulnerability Type: Cross Site Scripting…

TYPO3 v10 Release Material

TYPO3 v10 Release Material Use these resources to boost TYPO3 v10 LTS adoption. The release of TYPO3 v10 on 21 April 2020 will be a milestone in the history of our open source CMS—23 years after it was founded in 1997. A major release is a chance to…

MoceanSMS Login (mocean_sms_login)

MoceanAPI Two Factor Authentication (2FA) Login Typo3 Extension allows frontend users to opt in to SMS 2FA verification for login. You can send OTP via SMS text message to your users. This extension…

Show extension details Download ZIP of version 1.0.2 Extension documentation

PMK HTML Crop (pmkhtmlcrop)

Safe cropping of HTML content. Adds a new command (htmlCrop) to stdWrap using hook in TYPO3 v4.2. Can be uses as a userFunc in older versions of TYPO3. Using this function instead of the standard…

Show extension details Download ZIP of version 1.0.1 Extension documentation

Manuel dInstall Typo3 sous linux (jg_linux_fr)

Pour les dbutants (newbees) cest sans doute un tutorial principal, qui vous aprendra installer les logiciels et Typo3 sous linux. ATTENTION toutefois, document non encore valid par nos soins mais mis…

Show extension details Download ZIP of version 0.0.1 Extension documentation

Content

The Content Group Write, Translate, Proofread The TYPO3 Content Group is searching for motivated TYPO3 community members, who are interested in giving something back to our favorite Content Management System. This is the group where no coding skills…

Security Bulletin TYPO3-20061010-1: fe_adminLib.inc

Affected Versions: ALL Vulnerability Type: cross Site Scripting (XSS) Severity: minor Problem Description: The "backURL" parameter is not escaped correctly. A prepared URL could potentially contain…

Friday Bugday

Sponsor of this bugday is wmdb Systems GmbH Am Wehrhahn 41 40211 Düsseldorf When you are near by, you are invited to come to wmdb for joining the bugday! Join us on IRC: irc://irc.freenode.net/…