Author: Helmut Hummel
SECURITY-ISSUE-IN-THIRD-PARTY-EXTENSION-T3BLOG-T3BLOG: Security issue in third party extension "T3Blog" (t3blog)
SECURITY-ISSUES-IN-THIRD-PARTY-TYPO3-EXTENSIONS-3: Security issues in third-party TYPO3 extensions
MULTIPLE-SECURITY-ISSUES-FOUND-IN-TYPO3-CORE-4: Multiple security issues found in TYPO3 core
TYPO3-CORE-SA-2011-003: Improper error handling could lead to cache flooding in TYPO3 Core
It has been discovered that TYPO3 is susceptible to Cache Flooding
TYPO3-CORE-SA-2011-002: Potential SQL injection vulnerability in TYPO3 Core
It has been discovered that the TYPO3 prepared statement database API allows SQL Injections.
SECURITY-ISSUES-IN-THIRD-PARTY-TYPO3-EXTENSIONS-4: Security issues in third-party TYPO3 extensions
SECURITY-ISSUES-IN-THIRD-PARTY-TYPO3-EXTENSIONS-5: Security issues in third-party TYPO3 extensions
TYPO3-EXT-SA-2011-006: Several vulnerabilities in third party extensions
Several vulnerabilities have been found in the following third-party TYPO3 extensions: MM DAM - FEFileList (mm_dam_filelist), Events (julle_events), WEC Staff Directory (wec_staffdirectory), TGM news (tgm_news), TGM media (tgm_media), TGM calendar module (tgm_cal), DAM Lightbox (damlightbox), Download system (sb_downloader), iwbase (iwbase), Fussballtippspiel (toto), Font resizer (fontsizer), Adminer (t3adminer)