TYPO3 News

Security Bulletin TYPO3-20080515-2: Multiple vulnerabilities in extension Fro...
by henning@typo3.org
15 May 2008 at 5:18am
It has been discovered that the extension Frontend Filemanager (air_filemanager) is susceptible to Cross Site Scripting (XSS) attacks and allows Remote Code Execution.

Security Bulletin TYPO3-20080515-1: Multiple vulnerabilities in extension Fro...
by henning@typo3.org
15 May 2008 at 5:16am
It has been discovered that the extension Frontend User Registration (sr_feuser_register) is susceptible to Cross Site Scripting (XSS) attacks and allows Remote Command Execution.

Security Bulletin TYPO3-20080513-4: Multiple vulnerabilities in extension Sta...
by henning@typo3.org
13 May 2008 at 7:24am
It has been discovered that the extension Statistics (ke_stats) is vulnerable to Blind SQL Injection attacks. Also, a Cross Site Scripting issue has been found.

Security Bulletin TYPO3-20080513-3: Cross Site Scripting vulnerability in ext...
by henning@typo3.org
13 May 2008 at 6:37am
It has been discovered that the extension Event Database (rlmp_eventdb) is susceptible to Cross Site Scripting (XSS) attacks.

Security Bulletin TYPO3-20080513-2: Cross Site Scripting vulnerability in ext...
by henning@typo3.org
13 May 2008 at 6:31am
It has been discovered that the extension Questionaire (pbsurvey) is susceptible to Cross Site Scripting (XSS) attacks.

Security Bulletin TYPO3-20080513-1: Multiple vulnerabilities in extension WT ...
by henning@typo3.org
13 May 2008 at 6:25am
It has been discovered that the extension WT Gallery (wt_gallery) is susceptible to Path Traversal and Cross Site Scripting (XSS) attacks. Besides that, it may disclose sensitive information.

TYPO3 v5 project report: April 2008
by robert@typo3.org
5 May 2008 at 10:22am
For all of you who are not that deeply involved in the making of TYPO3 v5, I have collected the most important bits of last month's activities.

Security Bulletin TYPO3-20080505-2: Cross Site Scripting vulnerability in ext...
by henning@typo3.org
5 May 2008 at 5:18am
It has been discovered that the extension powermail is susceptible to Cross Site Scripting (XSS) attacks.

Security Bulletin TYPO3-20080505-1: Multiple vulnerabilities in extension Mai...
by henning@typo3.org
5 May 2008 at 5:14am
It has been discovered that the extension MailformPlus (th_mailformplus) is susceptible to Cross Site Scripting (XSS) attacks and allows Remote Code Execution.

TYPO3 Association releases Version 4.2: Focus on Usability and Performance Im...
23 Apr 2008 at 6:41am
BAAR - The TYPO3 Association 4.x Development Team has released a new version of their very successful open source project. TYPO3 has been downloaded over 3.000.000 times from Sourceforge.org which...