All blog posts in June 2009

23 June 2009

TYPO3 and FLOW3 each reached the finals of this year's SourceForge Community Choice Awards!

TYPO3-SA-2009-009: Cross-Site Scripting vulnerability in extension Modern Guestbook / Commenting System (ve_guestbook)

Marcus Krause

16 June 2009

It has been discovered that the extension Modern Guestbook / Commenting system (ve_guestbook) is vulnerable to Cross-Site Scripting.

Security

TYPO3-SA-2009-008: Multiple vulnerabilities in third party extensions

Marcus Krause

16 June 2009

Several vulnerabilities have been found in the following third party TYPO3 extensions: "FrontEnd MP3 Player" (fe_mp3player), "Search In Tables" (fesearchintable), "Content Search" (gst_contentsearch), "Multilingual Alias" (multilingual_alias), "Myth Repository" (myth_repository) and "References database" (t3references)

Security

TYPO3-SA-2009-007: TYPO3 Security Bulletin

Zoe Legacy

16 June 2009

It has been discovered that the extension Virtual Civil Services (civserv) is vulnerable to SQL-injections.

Security

TYPO3-SA-2009-006: TYPO3 Security Bulletin

Zoe Legacy

16 June 2009

It has been discovered that the extension CWT Community (cwt_community) is vulnerable to SQL-injections.

SECURITY-ISSUES-IN-SEVERAL-THIRD-PARTY-TYPO3-EXTENSIONS-INCLUDING-CIVSERV-CWT-COMMUNITY-AND-VE-GUESTBOOK: Security issues in several third party TYPO3 extensions including civserv, cwt_community and ve_guestbook

News team

16 June 2009

Several vulnerabilities have been found in the following third party TYPO3 extensions: "Virtual Civil Services" (civserv), "Modern Guestbook / Commenting system" (ve_guestbook), "CWT Community" (cwt_community), "FrontEnd MP3 Player" (fe_mp3player), "Search In Tables" (fesearchintable), "Content Search" (gst_contentsearch), "Multilingual Alias" (multilingual_alias), "Myth Repository" (myth_repository), "References database" (t3references)