Author: Helmut Hummel
TYPO3-EXT-SA-2011-004: Cross Site Scripting Vulnerability in extension Questionaire (pbsurvey)
It has been discovered that the extension "Questionaire" (pbsurvey) is vulnerable to Cross-Site Scripting.
Read moreTYPO3-EXT-SA-2011-003: Several Vulnerabilities in extension Formhandler (formhandler)
It has been discovered that the extension Formhandler (formhandler) is vulnerable to SQL-Injection and Cross-Site Scripting.
TYPO3-EXT-SA-2011-002: Multiple SQL Injection vulnerabilities in extension "Website Photo Gallery" (jm_gallery)
It has been discovered that the extension Website Photo Gallery (jm_gallery) is vulnerable to SQL injection.
SECURITY-ISSUE-IN-THIRD-PARTY-EXTENSION-WEBSITE-PHOTO-GALLERY-JM-GALLERY: Security issue in third party extension "Website Photo Gallery" (jm_gallery)
MULTIPLE-SECURITY-ISSUES-FOUND-IN-TYPO3-CORE-5: Multiple security issues found in TYPO3 core
TYPO3-CORE-SA-2011-001: Multiple vulnerabilities in TYPO3 Core
It has been discovered that TYPO3 Core is vulnerable to Cross-Site Scripting (XSS), Information Disclosure, Authentication Delay Bypass, Unserialize() vulnerability, Missing Access Control.
SECURITY-ISSUES-IN-THIRD-PARTY-EXTENSION-PHPMYADMIN-PHPMYADMIN-4: Security issues in third party extension "phpMyAdmin" (phpmyadmin)
TYPO3-SA-2011-008: Directory Traversal and Code Injection vulnerability in extension phpMyAdmin (phpmyadmin)
It has been discovered that the extension phpMyAdmin (phpmyadmin) is vulnerable to Directory Traversal and Code Injection.
TYPO3-SA-2011-007: SQL Injection vulnerability in extension Faceted Search (ke_search)
It has been discovered that the extension Faceted Search (ke_search) is vulnerable to SQL Injection.