Video Commune (vcommune)

Video Commune doesnt store video files, the idea is to share on-line videos links of the main famous providers youtube,,.. .The extension is being developed with the MVC framework,lib 0.0.24 and extjs…

Show extension details Download ZIP of version 0.0.3 Extension documentation

WebRTC SIP Phone (webrtc_phone)

WebRTC implementation on the Typo3 page, so that web visitor can call directly using web browser. Needs a SIP server with SIP over WebSocket capability such as OverSIP, Kamaililio, Asterisk OfficeSIP…

Show extension details Download ZIP of version 0.0.1 Extension documentation

T3CON10 Call for Papers

We are inviting contributions on all aspects of the TYPO3 system. The program will cover a variety of subjects including: Design, Internal System Development, Tools, and Applications. Any topic likely…

Security Bulletin TYPO3-20080619-1: Several vulnerabilities have been found in TYPO3 third party extensions

This Collective Security Bulletin (CSB) is a listing of vulnerable extensions with neither significant download numbers nor other special importance amongst the TYPO3 Community. The intention of CSBs…

Cross-Site Scripting in extension "Fluid Components" (fluid_components)

Release Date: March 22, 2023 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "Fluid Components" (fluid_components) Composer Package…

Carrier failure causes outages on typo3.org infrastructure

Due to an unplanned power failure at our network carrier, the data center where some typo3.org subdomains are hosted have been completely offline from June 24 04:37:15 UTC+2 to June 24 19:28:48 UTC+2…

Several Vulnerabilities in extension Formhandler (formhandler)

Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 0.9.14 and below Vulnerability Types: SQL Injection, Cross-Site…

SQL Injection vulnerability in extension Formhandler (formhandler)

Release Date: September 25, 2013 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Version: 1.6.1 and alll versions below Vulnerability…

SQL Injection vulnerability in extension RealURL: speaking paths for TYPO3 (realurl)

Release Date: September 25, 2013 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.12.6 and below Vulnerability Type:…

TYPO3 security (a3_security)

Extension enables/disables apache write permission on typo3conf/ext, typo3conf/localconf.php, typo3conf/extTables.php and other user defined files or folders.

Show extension details Download ZIP of version 1.2.0 Extension documentation

Calling All TYPO3 Enthusiasts: Share Your Sales Experiences!

The need for official sales enablement materials for TYPO3 have been raised multiple times. With a Marketing Team bigger and better staffed than ever before, we want to tackle this topic and create…

February's diary of the TYPO3 Association

2 February: Strategy Workshop in Frankfurt On February 2nd members of the Board and of the Expert Advisory Board (EAB) of the TYPO3 Association (T3A) met in Frankfurt for a strategy workshop. The aim…

Information disclosure vulnerabilities in extension "Front End User Registration" (sr_feuser_register)

Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 2.6.1 and below Vulnerability Type: Information disclosure Severity:…

Several Vulnerabilities in extension SmoothGallery for TYPO3 (rgsmoothgallery)

Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.5.1 and below Vulnerability Types: Cross-Site Scripting, Information…

Several Vulnerabilities in extension Direct Mail Subscription (direct_mail_subscription)

Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.1.0 and below Vulnerability Types: SQL Injection, Cross-Site…

Initiatives

TYPO3 Core Development - Strategic Initiatives An “initiative” consists of people with a common interest to make long-term improvements in a specific area of TYPO3 including strategic plans, goals, task-breakdown and monitoring of progress. These…

Codesprint: Waalwijk and Venlo Camp make for a great week in april

Our dutch friends are good for an outstanding contributing experience in April: they offer a sprint- and camp combination. MaxServ will host the TYPO3 codesprint 18.4 - 21.4 in Waalwijk, where the…

Vulnerabilitiy in extension Frontend User Registration (sr_feuser_register)

Component Type: Third party extension. This extensions is not part of the TYPO3 default installation. Affected Versions: Version 2.5.24 and all versions below. Vulnerability Type: Cross Site Scripting…

You, me, and TYPO3!

You, me, and TYPO3! Always wanted to know who make up this great community that everybody is talking about? You, me, and TYPO3! is a interview series introducing fantastic people that are part of the community - just by being themselves, and being…

iFrame for HTML5 Websites (lp_iframe)

Yet another iFrame extension with HTML5 support. Rendered with TypoScript. Doc: http://docs.typo3.org/typo3cms/extensions/lp_iframe/ and Git: https://github.com/lars85/TYPO3-Extensions-lp_iframe/

Show extension details Download ZIP of version 1.3.0 Extension documentation

Security Bulletin TYPO3-20061010-1: fe_adminLib.inc

Affected Versions: ALL Vulnerability Type: cross Site Scripting (XSS) Severity: minor Problem Description: The "backURL" parameter is not escaped correctly. A prepared URL could potentially contain…

TYPO3 v10 Release Material

TYPO3 v10 Release Material Use these resources to boost TYPO3 v10 LTS adoption. The release of TYPO3 v10 on 21 April 2020 will be a milestone in the history of our open source CMS—23 years after it was founded in 1997. A major release is a chance to…

Captcha Bypass in extension "powermail" (powermail)

Release Date: April 10, 2014 Bulletin update: September 18, 2014 (added CVE) Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions:…

Friday Bugday

Sponsor of this bugday is wmdb Systems GmbH Am Wehrhahn 41 40211 Düsseldorf When you are near by, you are invited to come to wmdb for joining the bugday! Join us on IRC: irc://irc.freenode.net/…

Mass Assignment in extension Direct Mail Subscription (direct_mail_subscription)

Release Date: February 12, 2014 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 2.0.0 and below Vulnerability Type:…