Posts by date: 2008 / 5 en https://news.typo3.com/article/archive/2008/may/blog.archive.xml Tue, 28 Jul 2026 14:14:04 +0200 https://news.typo3.com/article/getting-started-with-the-forgehttps://news.typo3.com/article/getting-started-with-the-forge#commentsFri, 30 May 2008 19:14:00 +0200Robert Lemkehttps://news.typo3.com/article/getting-started-with-the-forge https://news.typo3.com/security/advisory/typo3-20080527-2https://news.typo3.com/security/advisory/typo3-20080527-2#commentsTue, 27 May 2008 10:00:00 +0200Zoe Legacyhttps://news.typo3.com/security/advisory/typo3-20080527-2It has been discovered that the extension "Library for Frontend plugins" (sg_zfelib) is susceptible to SQL Injections. https://news.typo3.com/security/advisory/security-bulletin-typo3-20080527-2-sql-injection-in-extension-library-for-frontend-plugins-sg-zfelibhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080527-2-sql-injection-in-extension-library-for-frontend-plugins-sg-zfelib#commentsTue, 27 May 2008 08:15:00 +0200Henning Pingelhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080527-2-sql-injection-in-extension-library-for-frontend-plugins-sg-zfelibIt has been discovered that the extension "Library for Frontend plugins" (sg_zfelib) is susceptible to SQL Injections. https://news.typo3.com/security/advisory/security-bulletin-typo3-20080527-1-cross-site-scripting-vulnerability-in-extension-kj-image-lightbox-v2-kj-imagelightbox2https://news.typo3.com/security/advisory/security-bulletin-typo3-20080527-1-cross-site-scripting-vulnerability-in-extension-kj-image-lightbox-v2-kj-imagelightbox2#commentsTue, 27 May 2008 07:21:00 +0200Henning Pingelhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080527-1-cross-site-scripting-vulnerability-in-extension-kj-image-lightbox-v2-kj-imagelightbox2It has been discovered that the extension "KJ: Image Lightbox v2" (kj_imagelightbox2) is susceptible to Cross Site Scripting (XSS) attacks. https://news.typo3.com/security/advisory/typo3-20080527-1https://news.typo3.com/security/advisory/typo3-20080527-1#commentsTue, 27 May 2008 00:00:00 +0200Zoe Legacyhttps://news.typo3.com/security/advisory/typo3-20080527-1It has been discovered that the extension "KJ: Image Lightbox v2" (kj_imagelightbox2) is susceptible to Cross Site Scripting (XSS) attacks. https://news.typo3.com/security/advisory/typo3-20080515-1https://news.typo3.com/security/advisory/typo3-20080515-1#commentsThu, 15 May 2008 10:00:00 +0200Zoe Legacyhttps://news.typo3.com/security/advisory/typo3-20080515-1It has been discovered that the extension Frontend User Registration (sr_feuser_register) is susceptible to Cross Site Scripting (XSS) attacks and allows Remote Command Execution. https://news.typo3.com/security/advisory/typo3-20080515-2https://news.typo3.com/security/advisory/typo3-20080515-2#commentsThu, 15 May 2008 10:00:00 +0200Zoe Legacyhttps://news.typo3.com/security/advisory/typo3-20080515-2It has been discovered that the extension Frontend Filemanager (air_filemanager) is susceptible to Cross Site Scripting (XSS) attacks and allows Remote Code Execution. https://news.typo3.com/security/advisory/security-bulletin-typo3-20080515-2-multiple-vulnerabilities-in-extension-frontend-filemanager-air-filemanagerhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080515-2-multiple-vulnerabilities-in-extension-frontend-filemanager-air-filemanager#commentsThu, 15 May 2008 07:18:00 +0200Henning Pingelhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080515-2-multiple-vulnerabilities-in-extension-frontend-filemanager-air-filemanagerIt has been discovered that the extension Frontend Filemanager (air_filemanager) is susceptible to Cross Site Scripting (XSS) attacks and allows Remote Code Execution. https://news.typo3.com/security/advisory/security-bulletin-typo3-20080515-1-multiple-vulnerabilities-in-extension-frontend-user-registration-sr-feuser-registerhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080515-1-multiple-vulnerabilities-in-extension-frontend-user-registration-sr-feuser-register#commentsThu, 15 May 2008 07:16:00 +0200Henning Pingelhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080515-1-multiple-vulnerabilities-in-extension-frontend-user-registration-sr-feuser-registerIt has been discovered that the extension Frontend User Registration (sr_feuser_register) is susceptible to Cross Site Scripting (XSS) attacks and allows Remote Command Execution. https://news.typo3.com/security/advisory/typo3-20080513-4https://news.typo3.com/security/advisory/typo3-20080513-4#commentsTue, 13 May 2008 10:00:00 +0200Zoe Legacyhttps://news.typo3.com/security/advisory/typo3-20080513-4It has been discovered that the extension Statistics (ke_stats) is vulnerable to Blind SQL Injection attacks. Also, a Cross Site Scripting issue has been found. https://news.typo3.com/security/advisory/typo3-20080513-3https://news.typo3.com/security/advisory/typo3-20080513-3#commentsTue, 13 May 2008 10:00:00 +0200Zoe Legacyhttps://news.typo3.com/security/advisory/typo3-20080513-3It has been discovered that the extension Event Database (rlmp_eventdb) is susceptible to Cross Site Scripting (XSS) attacks. https://news.typo3.com/security/advisory/typo3-20080513-2https://news.typo3.com/security/advisory/typo3-20080513-2#commentsTue, 13 May 2008 10:00:00 +0200Zoe Legacyhttps://news.typo3.com/security/advisory/typo3-20080513-2It has been discovered that the extension Questionaire (pbsurvey) is susceptible to Cross Site Scripting (XSS) attacks. https://news.typo3.com/security/advisory/typo3-20080513-1https://news.typo3.com/security/advisory/typo3-20080513-1#commentsTue, 13 May 2008 10:00:00 +0200Zoe Legacyhttps://news.typo3.com/security/advisory/typo3-20080513-1It has been discovered that the extension wt_gallery is susceptible to Path Traversal and Cross Site Scripting (XSS) attacks. Besides that, it may disclose sensitive information. https://news.typo3.com/security/advisory/security-bulletin-typo3-20080513-4-multiple-vulnerabilities-in-extension-statistics-ke-statshttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080513-4-multiple-vulnerabilities-in-extension-statistics-ke-stats#commentsTue, 13 May 2008 09:24:00 +0200Henning Pingelhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080513-4-multiple-vulnerabilities-in-extension-statistics-ke-statsIt has been discovered that the extension Statistics (ke_stats) is vulnerable to Blind SQL Injection attacks. Also, a Cross Site Scripting issue has been found. https://news.typo3.com/security/advisory/security-bulletin-typo3-20080513-3-cross-site-scripting-vulnerability-in-extension-event-database-rlmp-eventdbhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080513-3-cross-site-scripting-vulnerability-in-extension-event-database-rlmp-eventdb#commentsTue, 13 May 2008 08:37:00 +0200Henning Pingelhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080513-3-cross-site-scripting-vulnerability-in-extension-event-database-rlmp-eventdbIt has been discovered that the extension Event Database (rlmp_eventdb) is susceptible to Cross Site Scripting (XSS) attacks. https://news.typo3.com/security/advisory/security-bulletin-typo3-20080513-2-cross-site-scripting-vulnerability-in-extension-questionaire-pbsurveyhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080513-2-cross-site-scripting-vulnerability-in-extension-questionaire-pbsurvey#commentsTue, 13 May 2008 08:31:00 +0200Henning Pingelhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080513-2-cross-site-scripting-vulnerability-in-extension-questionaire-pbsurveyIt has been discovered that the extension Questionaire (pbsurvey) is susceptible to Cross Site Scripting (XSS) attacks. https://news.typo3.com/security/advisory/security-bulletin-typo3-20080513-1-multiple-vulnerabilities-in-extension-wt-gallery-wt-galleryhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080513-1-multiple-vulnerabilities-in-extension-wt-gallery-wt-gallery#commentsTue, 13 May 2008 08:25:00 +0200Henning Pingelhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080513-1-multiple-vulnerabilities-in-extension-wt-gallery-wt-galleryIt has been discovered that the extension WT Gallery (wt_gallery) is susceptible to Path Traversal and Cross Site Scripting (XSS) attacks. Besides that, it may disclose sensitive information. https://news.typo3.com/article/typo3-v5-project-report-april-2008https://news.typo3.com/article/typo3-v5-project-report-april-2008#commentsMon, 05 May 2008 12:22:00 +0200Robert Lemkehttps://news.typo3.com/article/typo3-v5-project-report-april-2008For all of you who are not that deeply involved in the making of TYPO3 v5, I have collected the most important bits of last month's activities. https://news.typo3.com/security/advisory/typo3-20080505-2https://news.typo3.com/security/advisory/typo3-20080505-2#commentsMon, 05 May 2008 10:00:00 +0200Zoe Legacyhttps://news.typo3.com/security/advisory/typo3-20080505-2It has been discovered that the extension powermail is susceptible to Cross Site Scripting (XSS) attacks. https://news.typo3.com/security/advisory/typo3-20080505-1https://news.typo3.com/security/advisory/typo3-20080505-1#commentsMon, 05 May 2008 10:00:00 +0200Zoe Legacyhttps://news.typo3.com/security/advisory/typo3-20080505-1It has been discovered that the extension MailformPlus (th_mailformplus) is susceptible to Cross Site Scripting (XSS) attacks and allows Remote Code Execution. https://news.typo3.com/security/advisory/security-bulletin-typo3-20080505-2-cross-site-scripting-vulnerability-in-extension-powermailhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080505-2-cross-site-scripting-vulnerability-in-extension-powermail#commentsMon, 05 May 2008 07:18:00 +0200Henning Pingelhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080505-2-cross-site-scripting-vulnerability-in-extension-powermailIt has been discovered that the extension powermail is susceptible to Cross Site Scripting (XSS) attacks. https://news.typo3.com/security/advisory/security-bulletin-typo3-20080505-1-multiple-vulnerabilities-in-extension-mailformplus-th-mailformplushttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080505-1-multiple-vulnerabilities-in-extension-mailformplus-th-mailformplus#commentsMon, 05 May 2008 07:14:00 +0200Henning Pingelhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080505-1-multiple-vulnerabilities-in-extension-mailformplus-th-mailformplusIt has been discovered that the extension MailformPlus (th_mailformplus) is susceptible to Cross Site Scripting (XSS) attacks and allows Remote Code Execution.