Posts by author Ekkehard Gümbel en https://news.typo3.com/article/author/ekkehard-g%C3%83%C2%BCmbel/blog.author.xml Fri, 24 Jul 2026 05:21:55 +0200 https://news.typo3.com/security/advisory/typo3-20051010-10https://news.typo3.com/security/advisory/typo3-20051010-10#commentsMon, 10 Oct 2005 10:00:00 +0200Ekkehard Gümbelhttps://news.typo3.com/security/advisory/typo3-20051010-10A bug has been discovered in the "Front End News Submitter" (fe_news) where SQL injection is not safely prevented and thus malicious SQL commands are potentially possible. Since the RTE enabled version (fe_rtenews) is derived from fe_news, it is affected as well.