Posts by author Henning Pingel en https://news.typo3.com/article/author/henning-pingel/blog.author.xml Sat, 12 Sep 2026 05:58:55 +0200 https://news.typo3.com/security/advisory/security-issues-in-several-third-party-typo3-extensions-including-sr-feuser-registerhttps://news.typo3.com/security/advisory/security-issues-in-several-third-party-typo3-extensions-including-sr-feuser-register#commentsMon, 06 Apr 2009 07:25:00 +0200Henning Pingelhttps://news.typo3.com/security/advisory/security-issues-in-several-third-party-typo3-extensions-including-sr-feuser-registerSeveral vulnerabilities have been found in the following third party TYPO3 extensions: "Frontend User Registration" (sr_feuser_register), "A21glossary Advanced Output" (a21glossary_advanced_output), "ClickStream Analyzer (output)" (alternet_csa_out), "Directory Listing" (dir_listing), "Store Locator" (locator), "Userdata Create/Edit" (sg_userdata), "Versatile Calendar Extension (VCE)" (sk_calendar), "ultraCards" (th_ultracards), "Visitor Tracking" (ws_stats). https://news.typo3.com/security/advisory/several-third-party-typo3-extensions-contain-security-issueshttps://news.typo3.com/security/advisory/several-third-party-typo3-extensions-contain-security-issues#commentsThu, 05 Mar 2009 07:30:00 +0100Henning Pingelhttps://news.typo3.com/security/advisory/several-third-party-typo3-extensions-contain-security-issuesVulnerabilities have been found in the following third party TYPO3 extensions: "Accessibility Glossary" (a21glossary), "Calendar Base" (cal), "Flat Manager" (flatmgr) https://news.typo3.com/security/advisory/security-issues-in-several-third-party-typo3-extensionshttps://news.typo3.com/security/advisory/security-issues-in-several-third-party-typo3-extensions#commentsMon, 22 Dec 2008 14:21:00 +0100Henning Pingelhttps://news.typo3.com/security/advisory/security-issues-in-several-third-party-typo3-extensionsSecurity vulnerabilities have been discovered in the following third party TYPO3 extensions: "phpMyAdmin" (phpmyadmin), "DR Wiki - Typo3 Wiki extension" (dr_wiki), "WEC Discussion Forum" (wec_discussion), "Vox populi" (mv_vox_populi), "SB Universal Plugin" (SBuniplug), "Simple File Browser" (simplefilebrowser), "TU-Clausthal ODIN" (tuc_odin), "TU-Clausthal Staff" (tuc_staff), "WEBERkommunal Facilities" (wes_facilities). https://news.typo3.com/security/advisory/cross-site-scripting-vulnerabilities-in-typo3-corehttps://news.typo3.com/security/advisory/cross-site-scripting-vulnerabilities-in-typo3-core#commentsThu, 13 Nov 2008 07:36:00 +0100Henning Pingelhttps://news.typo3.com/security/advisory/cross-site-scripting-vulnerabilities-in-typo3-coreIt has been discovered that TYPO3 core is susceptible to two Cross Site Scripting (XSS) issues. The frontend plugin of system extension "felogin" and the backend module "file" are vulnerable. https://news.typo3.com/security/advisory/security-issues-in-typo3-extension-phpmyadmin-and-several-other-third-party-extensionshttps://news.typo3.com/security/advisory/security-issues-in-typo3-extension-phpmyadmin-and-several-other-third-party-extensions#commentsMon, 10 Nov 2008 07:16:00 +0100Henning Pingelhttps://news.typo3.com/security/advisory/security-issues-in-typo3-extension-phpmyadmin-and-several-other-third-party-extensionsSecurity issues have been discovered in the following third party TYPO3 extensions: "phpMyAdmin" (phpmyadmin), "advCalendar" (advcalendar), "CMS Poll system" (cms_poll), "eLuna Page Comments" (eluna_pagecomments), "Wir ber uns" [sic] (fsmi_people), "Dictionary" (rtgdictionary). https://news.typo3.com/security/advisory/security-issues-in-typo3-extension-commerce-and-several-other-third-party-extensionshttps://news.typo3.com/security/advisory/security-issues-in-typo3-extension-commerce-and-several-other-third-party-extensions#commentsMon, 20 Oct 2008 08:17:00 +0200Henning Pingelhttps://news.typo3.com/security/advisory/security-issues-in-typo3-extension-commerce-and-several-other-third-party-extensionsSecurity issues have been discovered in the following third party TYPO3 extensions: Commerce (commerce), JobControl (dmmjobcontrol), Econda Plugin (econda), Frontend Users View (feusersview), Mannschaftsliste (kiddog_playerlist), M1 Intern (m1_intern), Simple survey (simplesurvey), Page Improvements (sm_pageimprovements) https://news.typo3.com/security/advisory/security-bulletin-typo3-20080527-2-sql-injection-in-extension-library-for-frontend-plugins-sg-zfelibhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080527-2-sql-injection-in-extension-library-for-frontend-plugins-sg-zfelib#commentsTue, 27 May 2008 08:15:00 +0200Henning Pingelhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080527-2-sql-injection-in-extension-library-for-frontend-plugins-sg-zfelibIt has been discovered that the extension "Library for Frontend plugins" (sg_zfelib) is susceptible to SQL Injections. https://news.typo3.com/security/advisory/security-bulletin-typo3-20080527-1-cross-site-scripting-vulnerability-in-extension-kj-image-lightbox-v2-kj-imagelightbox2https://news.typo3.com/security/advisory/security-bulletin-typo3-20080527-1-cross-site-scripting-vulnerability-in-extension-kj-image-lightbox-v2-kj-imagelightbox2#commentsTue, 27 May 2008 07:21:00 +0200Henning Pingelhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080527-1-cross-site-scripting-vulnerability-in-extension-kj-image-lightbox-v2-kj-imagelightbox2It has been discovered that the extension "KJ: Image Lightbox v2" (kj_imagelightbox2) is susceptible to Cross Site Scripting (XSS) attacks. https://news.typo3.com/security/advisory/security-bulletin-typo3-20080515-2-multiple-vulnerabilities-in-extension-frontend-filemanager-air-filemanagerhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080515-2-multiple-vulnerabilities-in-extension-frontend-filemanager-air-filemanager#commentsThu, 15 May 2008 07:18:00 +0200Henning Pingelhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080515-2-multiple-vulnerabilities-in-extension-frontend-filemanager-air-filemanagerIt has been discovered that the extension Frontend Filemanager (air_filemanager) is susceptible to Cross Site Scripting (XSS) attacks and allows Remote Code Execution. https://news.typo3.com/security/advisory/security-bulletin-typo3-20080515-1-multiple-vulnerabilities-in-extension-frontend-user-registration-sr-feuser-registerhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080515-1-multiple-vulnerabilities-in-extension-frontend-user-registration-sr-feuser-register#commentsThu, 15 May 2008 07:16:00 +0200Henning Pingelhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080515-1-multiple-vulnerabilities-in-extension-frontend-user-registration-sr-feuser-registerIt has been discovered that the extension Frontend User Registration (sr_feuser_register) is susceptible to Cross Site Scripting (XSS) attacks and allows Remote Command Execution. https://news.typo3.com/security/advisory/security-bulletin-typo3-20080513-4-multiple-vulnerabilities-in-extension-statistics-ke-statshttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080513-4-multiple-vulnerabilities-in-extension-statistics-ke-stats#commentsTue, 13 May 2008 09:24:00 +0200Henning Pingelhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080513-4-multiple-vulnerabilities-in-extension-statistics-ke-statsIt has been discovered that the extension Statistics (ke_stats) is vulnerable to Blind SQL Injection attacks. Also, a Cross Site Scripting issue has been found. https://news.typo3.com/security/advisory/security-bulletin-typo3-20080513-3-cross-site-scripting-vulnerability-in-extension-event-database-rlmp-eventdbhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080513-3-cross-site-scripting-vulnerability-in-extension-event-database-rlmp-eventdb#commentsTue, 13 May 2008 08:37:00 +0200Henning Pingelhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080513-3-cross-site-scripting-vulnerability-in-extension-event-database-rlmp-eventdbIt has been discovered that the extension Event Database (rlmp_eventdb) is susceptible to Cross Site Scripting (XSS) attacks. https://news.typo3.com/security/advisory/security-bulletin-typo3-20080513-2-cross-site-scripting-vulnerability-in-extension-questionaire-pbsurveyhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080513-2-cross-site-scripting-vulnerability-in-extension-questionaire-pbsurvey#commentsTue, 13 May 2008 08:31:00 +0200Henning Pingelhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080513-2-cross-site-scripting-vulnerability-in-extension-questionaire-pbsurveyIt has been discovered that the extension Questionaire (pbsurvey) is susceptible to Cross Site Scripting (XSS) attacks. https://news.typo3.com/security/advisory/security-bulletin-typo3-20080513-1-multiple-vulnerabilities-in-extension-wt-gallery-wt-galleryhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080513-1-multiple-vulnerabilities-in-extension-wt-gallery-wt-gallery#commentsTue, 13 May 2008 08:25:00 +0200Henning Pingelhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080513-1-multiple-vulnerabilities-in-extension-wt-gallery-wt-galleryIt has been discovered that the extension WT Gallery (wt_gallery) is susceptible to Path Traversal and Cross Site Scripting (XSS) attacks. Besides that, it may disclose sensitive information. https://news.typo3.com/security/advisory/security-bulletin-typo3-20080505-2-cross-site-scripting-vulnerability-in-extension-powermailhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080505-2-cross-site-scripting-vulnerability-in-extension-powermail#commentsMon, 05 May 2008 07:18:00 +0200Henning Pingelhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080505-2-cross-site-scripting-vulnerability-in-extension-powermailIt has been discovered that the extension powermail is susceptible to Cross Site Scripting (XSS) attacks. https://news.typo3.com/security/advisory/security-bulletin-typo3-20080505-1-multiple-vulnerabilities-in-extension-mailformplus-th-mailformplushttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080505-1-multiple-vulnerabilities-in-extension-mailformplus-th-mailformplus#commentsMon, 05 May 2008 07:14:00 +0200Henning Pingelhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080505-1-multiple-vulnerabilities-in-extension-mailformplus-th-mailformplusIt has been discovered that the extension MailformPlus (th_mailformplus) is susceptible to Cross Site Scripting (XSS) attacks and allows Remote Code Execution. https://news.typo3.com/security/advisory/security-bulletin-typo3-20080416-2-sql-injections-in-extensions-pmk-rssnewsexport-and-cm-rdfexporthttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080416-2-sql-injections-in-extensions-pmk-rssnewsexport-and-cm-rdfexport#commentsWed, 16 Apr 2008 07:32:00 +0200Henning Pingelhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080416-2-sql-injections-in-extensions-pmk-rssnewsexport-and-cm-rdfexportIt has been discovered that the extensions pmk_rssnewsexport and cm_rdfexport are vulnerable to SQL Injection attacks. https://news.typo3.com/security/advisory/security-bulletin-typo3-20080416-1-multiple-vulnerabilities-in-extension-de-phpothttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080416-1-multiple-vulnerabilities-in-extension-de-phpot#commentsWed, 16 Apr 2008 07:05:00 +0200Henning Pingelhttps://news.typo3.com/security/advisory/security-bulletin-typo3-20080416-1-multiple-vulnerabilities-in-extension-de-phpotIt has been discovered that the extension de_phpot is vulnerable to multiple SQL Injection flaws and other types of security issues.