SR GD Crop & Resize (srgd)

Crop and Resize with GD. Usefull when ImageMagick is not available on the hoster. Idea from jb_gd_resize Typo3 extension and Smart Image Resizer script. Report to web@sruegg.ch

Show extension details Download ZIP of version 2.0.2

SQL-based Data Provider - Tesseract project (dataquery)

Assembles a query on data stored in the TYPO3 CMS local database, automatically enforcing criteria like language, publication date, etc. More info on http://www.typo3-tesseract.com/

Show extension details Download ZIP of version 2.1.3 Extension documentation

SQL injection in macina_banners / ric_rotation

Component Type: Third party extensions. These extensions are not part of the TYPO3 default installation Affected Versions: Affected is macina_banners (version 1.4.0 and below) and its descendant…

SQL Injection vulnerability in extension wt_directory (wt_directory)

Release Date: June 15, 2015 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.4.1 and below Vulnerability Type: SQL…

SQL Injection vulnerability in extension Store Locator (locator)

Release Date: June 15, 2015 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 3.3.0 and below Vulnerability Type: SQL…

SQL Injection vulnerability in extension Smoelenboek (ncgov_smoelenboek)

Release Date: June 15, 2015 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.0.8 and below Vulnerability Type: SQL…

SQL Injection vulnerability in extension RealURL: speaking paths for TYPO3 (realurl)

Release Date: September 25, 2013 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.12.6 and below Vulnerability Type:…

SQL Injection vulnerability in extension Multishop (multishop)

Release Date: June 03, 2013 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 2.0.38 and below Vulnerability Type: SQL…

SQL Injection vulnerability in extension Formhandler (formhandler)

Release Date: September 25, 2013 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Version: 1.6.1 and alll versions below Vulnerability…

SQL Injection vulnerability in extension Faceted Search (ke_search)

Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 0.3.0 and all versions below Vulnerability Type: SQL Injection…

SQL Injection vulnerability in extension FAQ - Frequently Asked Questions (js_faq)

Release Date: June 15, 2015 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.2.0 and below Vulnerability Type: SQL…

SQL Injection vulnerability in extension Developer Log (devlog)

Release Date: June 15, 2015 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 2.11.3 and below Vulnerability Type: SQL…

SQL Injection vulnerability in extension CoolURI (cooluri)

Release Date: February 19, 2012 Bulletin Update: November 06, 2014 (added CVE) Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions:…

SQL Injection vulnerability in extension Basic SEO Features (seo_basics)

Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 0.8.2 and below Vulnerability Type: SQL Injection Severity: High…

SQL Injection vulnerabilities in extension "WEC Discussion Forum" (wec_discussion)

Release Date: April 7, 2011 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 2.1.0 and all versions below Vulnerability…

SQL Injection in system extension indexed_search

Component Type: System extension, part of the TYPO3 default installation. Affected Versions: TYPO3 versions 3.x, 4.0 to 4.0.7, 4.1 to 4.1.3. Vulnerability Type: SQL Injection. Severity: Low. Problem…

SQL Injection in low-level Query Generator

Component Type: TYPO3 CMS Subcomponent: Query Generator (ext:lowlevel) Release Date: December 17, 2019 Vulnerability Type: SQL Injection Affected Versions: 8.0.0-8.7.29 and 9.0.0-9.5.11 and…

SQL Injection in fechangepassword

Component Type: Third party extension. This extension is not part of the TYPO3 default installation Affected Versions: Version 2.1.2 and all versions below Vulnerability Type: SQL Injection Severity:…

SQL Injection in extension Commerce (commerce)

Component Type: Third party extension. This extension is not part of the TYPO3 default installation. Affected Versions: Version 0.9.6 and below. Vulnerability Type: SQL Injection Severity: HIGH…

SQL Injection in extension "phpmyadmin" (phpmyadmin)

Release Date: March 10, 2020 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: SQL Injection Affected Versions: 5.4.0 and below…

SQL Injection in extension "phpMyAdmin" (phpmyadmin)

Release Date: May 12, 2020 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: phpMyAdmin (ext:phpmyadmin) Vulnerability Type: SQL…

SQL Injection in extension "ipandlanguageredirect" (ipandlanguageredirect)

Release Date: June 13, 2023 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "ipandlanguageredirect" (ipandlanguageredirect) Composer…

SQL Injection in extension "http:BL Blocking" (mh_httpbl)

Release Date: September 30, 2015 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.1.7 and below Vulnerability Type:…

SQL Injection in extension "comsolit Suggest" (comsolit_suggest)

Release Date: May 07, 2019 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: SQL Injection Affected Versions: 2.0.1 and below…

SQL Injection in extension "VHS: Fluid ViewHelpers" (vhs)

Release Date: March 16, 2021 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "VHS: Fluid ViewHelpers" (vhs) Vulnerability Type: SQL…