Author: Helmut Hummel
TYPO3-CORE-SA-2012-001: Several Vulnerabilities in TYPO3 Core
It has been discovered that TYPO3 Core is vulnerable to Cross-Site Scripting, Information Disclosure, Insecure Unserialize
Read moreTYPO3-EXT-SA-2012-003: Several vulnerabilities in third party extensions
Several vulnerabilities have been found in the following third-party TYPO3 extensions: tkcropthumbs, t3extplorer, tc_beuser, an_predigten, solr, pdfcontroller, cc20, jwplayer
TYPO3-EXT-SA-2012-001: Several vulnerabilities in third party extensions
Several vulnerabilities have been found in the following third-party TYPO3 extensions: css_filelinks, terminal, beuserswitch, rtg_files, irfaq, skt_eurocalc, jftcaforms, bc_post2facebook, aeurltool, mv_cooking, toi_category, ajado_facebook
SECURITY-ISSUES-IN-THIRD-PARTY-EXTENSIONS-PHPMYADMIN-PHPMYADMIN-AND-LDAP-EU-LDAP: Security issues in third party extensions "phpMyAdmin" (phpmyadmin) and "LDAP" (eu_ldap)
TYPO3-EXT-SA-2011-018: Multiple vulnerabilities in extension phpMyAdmin (phpmyadmin)
It has been discovered that the extension phpMyAdmin (phpmyadmin) is vulnerable to Local file inclusion.
TYPO3-EXT-SA-2011-017: Authentication Bypass and Blind LDAP Injection in extension eu_ldap
It has been discovered that the extension eu_ladap is vulnerable to Authentication Bypass and Blind LDAP Injection
SECURITY-CODE-SPRINT-A-RECAP: Security Code Sprint - A recap
TYPO3-EXT-SA-2011-016: Remote Command Execution and Remote File Disclosure vulnerability in extension pdf_generator2
It has been discovered that the extension pdf_generator2 is vulnerable to Remote Code Execution and Remote File Disclosure
TYPO3-EXT-SA-2011-015: Remote File Disclosure and Cross-Site Scripting vulnerability in extensions pmkshadowbox and pmkslimbox
It has been discovered that the extensions pmkshadowbox and pmkslimbox are vulnerable to Remote File Disclosure and Cross-Site Scripting.