It has been discovered that the extension "AWS SDK for PHP" (aws_sdk_php) is susceptible to Environment Variable Injection.

It has been discovered that the extension "Powermail" (powermail) is susceptible to Cross-Site Scripting.

It has been discovered that the extension "Amazon AWS S3 FAL driver (CDN)" (aus_driver_amazon_s3) is susceptible to Environment Variable Injection.

It has been discovered that the extension "Register to tt_address" (registeraddress) has a missing access check.

It has been discovered that the extension "Heise Shariff" (rx_shariff) is susceptible to Cross-Site Scripting.

It has been discovered, that TYPO3 CMS is vulnerable to Insecure Deserialization.

It has been discovered, that TYPO3 CMS is vulnerable to Privilege Escalation and SQL Injection.

It has been discovered, that TYPO3 CMS is vulnerable to Insecure Deserialization & Arbitrary Code Execution.

It has been discovered, that TYPO3 CMS is vulnerable to Authentication Bypass.

It has been discovered that the extension "Caretaker" (caretaker) is susceptible to Cross-Site Scripting.