Posts by date: 2007 / 7 en https://news.typo3.com/article/archive/2007/july/blog.archive.xml Tue, 28 Jul 2026 14:37:58 +0200 https://news.typo3.com/article/t3n-magazine-releases-five-current-typo3-articleshttps://news.typo3.com/article/t3n-magazine-releases-five-current-typo3-articles#commentsFri, 20 Jul 2007 13:56:00 +0200Thomas Hempelhttps://news.typo3.com/article/t3n-magazine-releases-five-current-typo3-articlesIt is time again for a bunch of T3N articles - seven pages from the current issue (No. 8) have been translated for your reading pleasure. https://news.typo3.com/security/advisory/typo3-security-bulletin-20070719-1-remote-shell-command-execution-in-extensions-embedding-phpmailerhttps://news.typo3.com/security/advisory/typo3-security-bulletin-20070719-1-remote-shell-command-execution-in-extensions-embedding-phpmailer#commentsThu, 19 Jul 2007 16:30:00 +0200Lars Houmarkhttps://news.typo3.com/security/advisory/typo3-security-bulletin-20070719-1-remote-shell-command-execution-in-extensions-embedding-phpmailerMultiple TYPO3 extensions is affected by the third party tool PHPMailer, which is vulnerable to a remote shell command execution. https://news.typo3.com/security/advisory/typo3-20070719-1https://news.typo3.com/security/advisory/typo3-20070719-1#commentsThu, 19 Jul 2007 10:00:00 +0200Zoe Legacyhttps://news.typo3.com/security/advisory/typo3-20070719-1Multiple TYPO3 extensions is affected by the third party tool PHPMailer, which is vulnerable to a remote shell command execution. https://news.typo3.com/article/typo3-412-and-407https://news.typo3.com/article/typo3-412-and-407#commentsTue, 17 Jul 2007 16:12:00 +0200Michael Stuckihttps://news.typo3.com/article/typo3-412-and-407The TYPO3 Core Team announces versions 4.1.2 and 4.0.7 of the TYPO3 Enterprise Content Management System. https://news.typo3.com/security/advisory/typo3-security-bulletin-typo3-20070716-2-information-disclosure-from-extension-phpmyadminhttps://news.typo3.com/security/advisory/typo3-security-bulletin-typo3-20070716-2-information-disclosure-from-extension-phpmyadmin#commentsMon, 16 Jul 2007 23:50:00 +0200Lars Houmarkhttps://news.typo3.com/security/advisory/typo3-security-bulletin-typo3-20070716-2-information-disclosure-from-extension-phpmyadminAn information disclosure issue has been found in the phpmyadmin extension of TYPO3 that may give access to phpinfo() information in special cases. The standalone version of phpmyadmin is not affected. https://news.typo3.com/security/advisory/typo3-security-bulletin-20070716-1-cross-site-scripting-vulnerability-in-faqhttps://news.typo3.com/security/advisory/typo3-security-bulletin-20070716-1-cross-site-scripting-vulnerability-in-faq#commentsMon, 16 Jul 2007 13:17:00 +0200Lars Houmarkhttps://news.typo3.com/security/advisory/typo3-security-bulletin-20070716-1-cross-site-scripting-vulnerability-in-faqIt has been discovered that the extension faq is susceptible to cross site scripting (XSS) attacks, making it possible to execute arbitrary JavaScript. https://news.typo3.com/security/advisory/typo3-20070716-2https://news.typo3.com/security/advisory/typo3-20070716-2#commentsMon, 16 Jul 2007 10:00:00 +0200Ekkehard Gümbelhttps://news.typo3.com/security/advisory/typo3-20070716-2An information disclosure issue has been found in the phpmyadmin extension of TYPO3 that may give access to phpinfo() information in special cases. The standalone version of phpmyadmin is not affected. https://news.typo3.com/security/advisory/typo3-20070716-1https://news.typo3.com/security/advisory/typo3-20070716-1#commentsMon, 16 Jul 2007 10:00:00 +0200Zoe Legacyhttps://news.typo3.com/security/advisory/typo3-20070716-1It has been discovered that the extension faq is susceptible to cross site scripting (XSS) attacks, making it possible to execute arbitrary JavaScript. https://news.typo3.com/security/advisory/typo3-security-bulletin-typo3-20070712-1-multiple-vulnerabilities-in-civservhttps://news.typo3.com/security/advisory/typo3-security-bulletin-typo3-20070712-1-multiple-vulnerabilities-in-civserv#commentsThu, 12 Jul 2007 12:17:00 +0200Lars Houmarkhttps://news.typo3.com/security/advisory/typo3-security-bulletin-typo3-20070712-1-multiple-vulnerabilities-in-civservMultiple vulnerabilities has been found. Incorrect handling of input from GET/POST-variables, and allowing an attacker to execute XSS and/or SQL Injection attacks. https://news.typo3.com/security/advisory/typo3-20070712-1https://news.typo3.com/security/advisory/typo3-20070712-1#commentsThu, 12 Jul 2007 10:00:00 +0200Zoe Legacyhttps://news.typo3.com/security/advisory/typo3-20070712-1Multiple vulnerabilities has been found in the extension civserv: Incorrect handling of input from GET/POST-variables, and allowing an attacker to execute XSS and/or SQL Injection attacks. https://news.typo3.com/security/advisory/typo3-security-bulletin-typo3-20070710-1-sql-injection-in-fechangepasswordhttps://news.typo3.com/security/advisory/typo3-security-bulletin-typo3-20070710-1-sql-injection-in-fechangepassword#commentsTue, 10 Jul 2007 20:06:00 +0200Lars Houmarkhttps://news.typo3.com/security/advisory/typo3-security-bulletin-typo3-20070710-1-sql-injection-in-fechangepasswordIt has been discovered that the extension fechangepassword is open for a SQL injection when updating the password. https://news.typo3.com/security/advisory/typo3-20070710-1https://news.typo3.com/security/advisory/typo3-20070710-1#commentsTue, 10 Jul 2007 10:00:00 +0200Zoe Legacyhttps://news.typo3.com/security/advisory/typo3-20070710-1It has been discovered that the extension fechangepassword is open for a SQL injection when updating the password. https://news.typo3.com/security/advisory/typo3-security-bulletin-typo3-20070709-1-incorrect-authentication-in-ftpbrowserhttps://news.typo3.com/security/advisory/typo3-security-bulletin-typo3-20070709-1-incorrect-authentication-in-ftpbrowser#commentsMon, 09 Jul 2007 14:22:00 +0200Lars Houmarkhttps://news.typo3.com/security/advisory/typo3-security-bulletin-typo3-20070709-1-incorrect-authentication-in-ftpbrowserIt has been discovered that the extension ftpbrowser is doing incorrect authentication in some files, making it open for exploiting. https://news.typo3.com/security/advisory/typo3-20070709-1https://news.typo3.com/security/advisory/typo3-20070709-1#commentsMon, 09 Jul 2007 10:00:00 +0200Zoe Legacyhttps://news.typo3.com/security/advisory/typo3-20070709-1It has been discovered that the extension ftpbrowser is doing incorrect authentication in some files, making it open for exploiting. https://news.typo3.com/security/advisory/typo3-security-bulletin-typo3-20070703-1-multiple-vulnerabilities-in-all-variants-of-mysqldumperhttps://news.typo3.com/security/advisory/typo3-security-bulletin-typo3-20070703-1-multiple-vulnerabilities-in-all-variants-of-mysqldumper#commentsTue, 03 Jul 2007 23:35:00 +0200Lars Houmarkhttps://news.typo3.com/security/advisory/typo3-security-bulletin-typo3-20070703-1-multiple-vulnerabilities-in-all-variants-of-mysqldumperMultiple vulnerabilities have been found in the third party extension "mysqldumper". Full read/write access to the connected database and other related issues. https://news.typo3.com/security/advisory/typo3-20070703-1https://news.typo3.com/security/advisory/typo3-20070703-1#commentsTue, 03 Jul 2007 10:00:00 +0200Zoe Legacyhttps://news.typo3.com/security/advisory/typo3-20070703-1Multiple vulnerabilities have been found in the third party extension "mysqldumper". Full read/write access to the connected database and other related issues.