Posts by date: 2009 / 12 en https://news.typo3.com/article/archive/2009/december/blog.archive.xml Tue, 28 Jul 2026 15:16:44 +0200 https://news.typo3.com/article/steering-committee-strategical-meetinghttps://news.typo3.com/article/steering-committee-strategical-meeting#commentsThu, 17 Dec 2009 14:08:00 +0100ben van 't endehttps://news.typo3.com/article/steering-committee-strategical-meetingThe Steering Committee met in Hamburg on the 4th of December at Bitfarmers for a Strategical Meeting. Oliver Hader (new core team leader) and Benni Mack (new release manager) have been invited to the meeting to participate. The structure of the Steering Committee and the TYPO3 Association as such have been discussed earlier in Karlsruhe. https://news.typo3.com/security/advisory/typo3-sa-2009-020https://news.typo3.com/security/advisory/typo3-sa-2009-020#commentsTue, 15 Dec 2009 10:00:00 +0100Georg Ringerhttps://news.typo3.com/security/advisory/typo3-sa-2009-020Several vulnerabilities have been found in the following third party TYPO3 extensions: Car (car), TYPO3 Watchdog (aba_watchdog), File list (dr_blob), ListMan (nl_listman), XDS Staff List (xds_staff), Document Directorys (danp_documentdirs), Random Prayer Version 2 (ste_prayer2), Diocese of Portsmouth Resources Database (pd_resources), Parish of the Holy Spirit Religious Art Gallery (hs_religiousartgallery), Parish Administration Database (ste_parish_admin), Diocese of Portsmouth Calendar (pd_calendar), Flash SlideShow (slideshow), Subscription (mf_subscription), No indexed Search (no_indexed_search), Job Exchange (jobexchange), Training Company Database (trainincdb), ZID Linkliste (zid_linklist), vShoutbox (vshoutbox), Frontend news submitter with RTE (fe_rtenews) https://news.typo3.com/security/advisory/security-issues-in-several-third-party-typo3-extensions-including-car-aba-watchdog-dr-blob-nl-listman-xds-staff-danp-documentdirs-ste-prayer2-pd-resources-hs-religiousartgallery-ste-parish-admin-pd-calendarhttps://news.typo3.com/security/advisory/security-issues-in-several-third-party-typo3-extensions-including-car-aba-watchdog-dr-blob-nl-listman-xds-staff-danp-documentdirs-ste-prayer2-pd-resources-hs-religiousartgallery-ste-parish-admin-pd-calendar#commentsTue, 15 Dec 2009 09:25:00 +0100Helmut Hummelhttps://news.typo3.com/security/advisory/security-issues-in-several-third-party-typo3-extensions-including-car-aba-watchdog-dr-blob-nl-listman-xds-staff-danp-documentdirs-ste-prayer2-pd-resources-hs-religiousartgallery-ste-parish-admin-pd-calendarSecurity vulnerabilities have been discovered in following third party TYPO3 extensions: Car (car), TYPO3 Watchdog (aba_watchdog), File list (dr_blob), ListMan (nl_listman), XDS Staff List (xds_staff), Document Directorys (danp_documentdirs), Random Prayer Version 2 (ste_prayer2), Diocese of Portsmouth Resources Database (pd_resources), Parish of the Holy Spirit Religious Art Gallery (hs_religiousartgallery), Parish Administration Database (ste_parish_admin), Diocese of Portsmouth Calendar (pd_calendar), Flash SlideShow (slideshow), Subscription (mf_subscription), No indexed Search (no_indexed_search), Job Exchange (jobexchange), Training Company Database (trainincdb), ZID Linkliste (zid_linklist), vShoutbox (vshoutbox), Frontend news submitter with RTE (fe_rtenews) https://news.typo3.com/article/series-of-english-video-tutorials-for-editors-completedhttps://news.typo3.com/article/series-of-english-video-tutorials-for-editors-completed#commentsThu, 10 Dec 2009 11:57:00 +0100News teamhttps://news.typo3.com/article/series-of-english-video-tutorials-for-editors-completedThe videos section now offers the complete video series featuring the current TYPO3 version in English as well. https://news.typo3.com/article/typo3-snippets-online-againhttps://news.typo3.com/article/typo3-snippets-online-again#commentsThu, 10 Dec 2009 10:48:00 +0100ben van 't endehttps://news.typo3.com/article/typo3-snippets-online-againAdd your snippets! Get your snippets! https://news.typo3.com/security/advisory/security-issues-in-several-third-party-typo3-extensions-including-cal-direct-mail-an-searchit-kk-downloader-lt-basetag-mchtrips-simple-glossar-tw-productfinder-wfqbehttps://news.typo3.com/security/advisory/security-issues-in-several-third-party-typo3-extensions-including-cal-direct-mail-an-searchit-kk-downloader-lt-basetag-mchtrips-simple-glossar-tw-productfinder-wfqbe#commentsTue, 01 Dec 2009 16:00:00 +0100Helmut Hummelhttps://news.typo3.com/security/advisory/security-issues-in-several-third-party-typo3-extensions-including-cal-direct-mail-an-searchit-kk-downloader-lt-basetag-mchtrips-simple-glossar-tw-productfinder-wfqbeSecurity vulnerabilities have been discovered in following third party TYPO3 extensions: "Calendar Base" (cal), "Direct Mail" (direct_mail), "[AN] Search it!" (an_searchit), "Simple download-system with counter and categories" (kk_downloader), "Automatic Base Tags for RealUrl" (lt_basetag), "Trips" (mchtrips), "simple Glossar" (simple_glossar), "TW Productfinder" (tw_productfinder), "DB Integration" (wfqbe) https://news.typo3.com/security/advisory/typo3-sa-2009-019https://news.typo3.com/security/advisory/typo3-sa-2009-019#commentsTue, 01 Dec 2009 10:00:00 +0100Marcus Krausehttps://news.typo3.com/security/advisory/typo3-sa-2009-019It has been discovered that the extension Calendar Base (cal) is vulnerable to Blind SQL Injection. https://news.typo3.com/security/advisory/typo3-sa-2009-018https://news.typo3.com/security/advisory/typo3-sa-2009-018#commentsTue, 01 Dec 2009 10:00:00 +0100Marcus Krausehttps://news.typo3.com/security/advisory/typo3-sa-2009-018It has been discovered that the extension Direct Mail (direct_mail) is vulnerable to XSS. https://news.typo3.com/security/advisory/typo3-sa-2009-017https://news.typo3.com/security/advisory/typo3-sa-2009-017#commentsTue, 01 Dec 2009 10:00:00 +0100Marcus Krausehttps://news.typo3.com/security/advisory/typo3-sa-2009-017Several vulnerabilities have been found in the following third party TYPO3 extensions: [AN] Search it! (an_searchit), Simple download-system with counter and categories (kk_downloader), Automatic Base Tags for RealUrl (lt_basetag), Trips (mchtrips), simple Glossar (simple_glossar), TW Productfinder (tw_productfinder), DB Integration (wfqbe)