It has been discovered that TYPO3 CMS is susceptible to information disclosure.

It has been discovered that the protection against insecure deserialization can be by-passed in Phar Stream Wrapper component.

It has been discovered that the protection against insecure deserialization can be by-passed in Phar Stream Wrapper component.

It has been discovered that the extension "comsolit Suggest" (comsolit_suggest) is susceptible to SQL Injection.

It has been discovered that the extension "Yet Another Gallery" (yag) is susceptible to Arbitrary File Upload.

It has been discovered that the extension "Event Calender" (pits_wd_calender) is susceptible to SQL Injection.

It has been discovered that the extension "Instagram" (ws_instagram) is susceptible to Cross Site Scripting.

It has been discovered that the extension "gkh RSS Import" (gkh_rss_import) is susceptible to Cross Site Scripting.

It has been discovered that the extension "phpMyAdmin" (phpmyadmin) is susceptible to Arbitrary file read and SQL injection.

It has been discovered that the extension "ImageOptimizer" (imageoptimizer) is susceptible to Remote Code Execution.