Posts by author Marcus Krause en https://news.typo3.com/article/author/marcus-krause/blog.author.xml Fri, 24 Jul 2026 03:30:59 +0200 https://news.typo3.com/security/advisory/typo3-ext-sa-2025-008https://news.typo3.com/security/advisory/typo3-ext-sa-2025-008#commentsTue, 20 May 2025 12:04:00 +0200Marcus Krausehttps://news.typo3.com/security/advisory/typo3-ext-sa-2025-008It has been discovered that the extension "Front End User Registration" (sr_feuser_register) is susceptible to Remote Code Execution and Insecure Direct Object Reference. https://news.typo3.com/security/advisory/typo3-ext-sa-2025-007https://news.typo3.com/security/advisory/typo3-ext-sa-2025-007#commentsTue, 20 May 2025 12:03:00 +0200Marcus Krausehttps://news.typo3.com/security/advisory/typo3-ext-sa-2025-007It has been discovered that the extension "Backup Plus" (ns_backup) is susceptible to Command Injection, Predictable Resource Location and Cross-Site Scripting. https://news.typo3.com/security/advisory/typo3-ext-sa-2025-006https://news.typo3.com/security/advisory/typo3-ext-sa-2025-006#commentsTue, 20 May 2025 12:02:00 +0200Marcus Krausehttps://news.typo3.com/security/advisory/typo3-ext-sa-2025-006It has been discovered that the extension "femanager" (femanager) is susceptible to Insecure Direct Object Reference. https://news.typo3.com/security/advisory/typo3-ext-sa-2025-005https://news.typo3.com/security/advisory/typo3-ext-sa-2025-005#commentsTue, 20 May 2025 12:01:00 +0200Marcus Krausehttps://news.typo3.com/security/advisory/typo3-ext-sa-2025-005It has been discovered that the extension "[clickstorm] SEO" (cs_seo) is susceptible to Cross-Site Scripting. https://news.typo3.com/security/advisory/typo3-ext-sa-2025-004https://news.typo3.com/security/advisory/typo3-ext-sa-2025-004#commentsTue, 20 May 2025 12:00:00 +0200Marcus Krausehttps://news.typo3.com/security/advisory/typo3-ext-sa-2025-004It has been discovered that the extension "Download manager" (reint_downloadmanager) is susceptible to Insecure Direct Object Reference. https://news.typo3.com/security/advisory/typo3-psa-2021-003https://news.typo3.com/security/advisory/typo3-psa-2021-003#commentsThu, 16 Dec 2021 12:00:00 +0100Marcus Krausehttps://news.typo3.com/security/advisory/typo3-psa-2021-003It has been discovered that TYPO3 CMS is susceptible to cache poisoning. https://news.typo3.com/security/advisory/typo3-core-sa-2017-003https://news.typo3.com/security/advisory/typo3-core-sa-2017-003#commentsTue, 28 Feb 2017 11:01:00 +0100Marcus Krausehttps://news.typo3.com/security/advisory/typo3-core-sa-2017-003It has been discovered, that TYPO3 is vulnerable to Cross-Site Scripting https://news.typo3.com/security/advisory/typo3-core-sa-2017-002https://news.typo3.com/security/advisory/typo3-core-sa-2017-002#commentsTue, 28 Feb 2017 11:00:00 +0100Marcus Krausehttps://news.typo3.com/security/advisory/typo3-core-sa-2017-002It has been discovered, that TYPO3 CMS is vulnerable to Authentication Bypass. https://news.typo3.com/security/advisory/typo3-core-sa-2017-001https://news.typo3.com/security/advisory/typo3-core-sa-2017-001#commentsTue, 03 Jan 2017 12:00:00 +0100Marcus Krausehttps://news.typo3.com/security/advisory/typo3-core-sa-2017-001It has been discovered, that the third party package swiftmailer/swiftmailer is vulnerable to Remote Code Execution https://news.typo3.com/security/advisory/typo3-core-sa-2016-024https://news.typo3.com/security/advisory/typo3-core-sa-2016-024#commentsTue, 22 Nov 2016 12:01:00 +0100Marcus Krausehttps://news.typo3.com/security/advisory/typo3-core-sa-2016-024It has been discovered, that TYPO3 is susceptible to Path Traversal. https://news.typo3.com/security/advisory/typo3-core-sa-2016-023https://news.typo3.com/security/advisory/typo3-core-sa-2016-023#commentsTue, 22 Nov 2016 12:00:00 +0100Marcus Krausehttps://news.typo3.com/security/advisory/typo3-core-sa-2016-023It has been discovered, that TYPO3 is susceptible to Insecure Unserialize. https://news.typo3.com/security/advisory/typo3-ext-sa-2016-033https://news.typo3.com/security/advisory/typo3-ext-sa-2016-033#commentsMon, 14 Nov 2016 12:05:00 +0100Marcus Krausehttps://news.typo3.com/security/advisory/typo3-ext-sa-2016-033It has been discovered that the extension "TC Directmail" (tcdirectmail) is susceptible to Unvalidated Redirect. https://news.typo3.com/security/advisory/typo3-ext-sa-2016-032https://news.typo3.com/security/advisory/typo3-ext-sa-2016-032#commentsMon, 14 Nov 2016 12:04:00 +0100Marcus Krausehttps://news.typo3.com/security/advisory/typo3-ext-sa-2016-032It has been discovered that the extension "Member Infosheets" (if_membersheet) is susceptible to SQL Injection. https://news.typo3.com/security/advisory/typo3-ext-sa-2016-031https://news.typo3.com/security/advisory/typo3-ext-sa-2016-031#commentsMon, 14 Nov 2016 12:03:00 +0100Marcus Krausehttps://news.typo3.com/security/advisory/typo3-ext-sa-2016-031It has been discovered that the extension "Secure Download Form" (rs_securedownload) is susceptible to Cross Site-Scripting. https://news.typo3.com/security/advisory/typo3-ext-sa-2016-030https://news.typo3.com/security/advisory/typo3-ext-sa-2016-030#commentsMon, 14 Nov 2016 12:02:00 +0100Marcus Krausehttps://news.typo3.com/security/advisory/typo3-ext-sa-2016-030It has been discovered that the extension "Shibboleth Authentication" (shibboleth_auth) is susceptible to SQL Injection. https://news.typo3.com/security/advisory/typo3-ext-sa-2016-029https://news.typo3.com/security/advisory/typo3-ext-sa-2016-029#commentsMon, 14 Nov 2016 12:01:00 +0100Marcus Krausehttps://news.typo3.com/security/advisory/typo3-ext-sa-2016-029It has been discovered that the extension "Code Highlighter" (mh_code_highlighter) is susceptible to Insecure Unserialize and SQL Injection. https://news.typo3.com/security/advisory/typo3-ext-sa-2016-028https://news.typo3.com/security/advisory/typo3-ext-sa-2016-028#commentsMon, 14 Nov 2016 12:00:00 +0100Marcus Krausehttps://news.typo3.com/security/advisory/typo3-ext-sa-2016-028It has been discovered that the extension "Store Locator" (locator) is susceptible to Cross-Site Scripting. https://news.typo3.com/security/advisory/typo3-ext-sa-2016-027https://news.typo3.com/security/advisory/typo3-ext-sa-2016-027#commentsFri, 11 Nov 2016 12:01:00 +0100Marcus Krausehttps://news.typo3.com/security/advisory/typo3-ext-sa-2016-027It has been discovered that the extension "HTML5 Video Player" (html5videoplayer) is susceptible to Cross-Site Scripting. https://news.typo3.com/security/advisory/typo3-ext-sa-2016-026https://news.typo3.com/security/advisory/typo3-ext-sa-2016-026#commentsFri, 11 Nov 2016 12:00:00 +0100Marcus Krausehttps://news.typo3.com/security/advisory/typo3-ext-sa-2016-026It has been discovered that the extension "TC Directmail " (tcdirectmail) is susceptible to Cross Site-Scripting and SQL Injection. https://news.typo3.com/security/advisory/typo3-ext-sa-2016-025https://news.typo3.com/security/advisory/typo3-ext-sa-2016-025#commentsThu, 29 Sep 2016 12:02:00 +0200Marcus Krausehttps://news.typo3.com/security/advisory/typo3-ext-sa-2016-025It has been discovered that the extension "phpMyAdmin" (phpmyadmin) has multiple vulnerabilities. https://news.typo3.com/security/advisory/typo3-ext-sa-2016-024https://news.typo3.com/security/advisory/typo3-ext-sa-2016-024#commentsThu, 29 Sep 2016 12:01:00 +0200Marcus Krausehttps://news.typo3.com/security/advisory/typo3-ext-sa-2016-024It has been discovered that the extension "Events" (jp_events) is susceptible to SQL Injection. https://news.typo3.com/security/advisory/typo3-ext-sa-2016-023https://news.typo3.com/security/advisory/typo3-ext-sa-2016-023#commentsThu, 29 Sep 2016 12:00:00 +0200Marcus Krausehttps://news.typo3.com/security/advisory/typo3-ext-sa-2016-023It has been discovered that the extension "GN Tactics Planner" (sf_gntactics) is susceptible to SQL Injection. https://news.typo3.com/security/advisory/typo3-ext-sa-2016-022https://news.typo3.com/security/advisory/typo3-ext-sa-2016-022#commentsMon, 12 Sep 2016 12:00:00 +0200Marcus Krausehttps://news.typo3.com/security/advisory/typo3-ext-sa-2016-022 https://news.typo3.com/security/advisory/typo3-core-sa-2016-018https://news.typo3.com/security/advisory/typo3-core-sa-2016-018#commentsTue, 19 Jul 2016 12:04:00 +0200Marcus Krausehttps://news.typo3.com/security/advisory/typo3-core-sa-2016-018It has been discovered, that TYPO3 is susceptible to Cross-Site Scripting. https://news.typo3.com/security/advisory/typo3-core-sa-2016-017https://news.typo3.com/security/advisory/typo3-core-sa-2016-017#commentsTue, 19 Jul 2016 12:03:00 +0200Marcus Krausehttps://news.typo3.com/security/advisory/typo3-core-sa-2016-017It has been discovered, that TYPO3 is susceptible to Information Disclosure. https://news.typo3.com/security/advisory/typo3-core-sa-2016-016https://news.typo3.com/security/advisory/typo3-core-sa-2016-016#commentsTue, 19 Jul 2016 12:02:00 +0200Marcus Krausehttps://news.typo3.com/security/advisory/typo3-core-sa-2016-016It has been discovered, that TYPO3 is susceptible to SQL Injection. https://news.typo3.com/security/advisory/typo3-core-sa-2016-015https://news.typo3.com/security/advisory/typo3-core-sa-2016-015#commentsTue, 19 Jul 2016 12:01:00 +0200Marcus Krausehttps://news.typo3.com/security/advisory/typo3-core-sa-2016-015It has been discovered, that TYPO3 is susceptible to Insecure Unserialize. https://news.typo3.com/security/advisory/typo3-core-sa-2016-014https://news.typo3.com/security/advisory/typo3-core-sa-2016-014#commentsTue, 19 Jul 2016 12:00:00 +0200Marcus Krausehttps://news.typo3.com/security/advisory/typo3-core-sa-2016-014It has been discovered, that TYPO3 is susceptible to Cross-Site Scripting. https://news.typo3.com/security/advisory/typo3-ext-sa-2016-020https://news.typo3.com/security/advisory/typo3-ext-sa-2016-020#commentsThu, 07 Jul 2016 12:01:00 +0200Marcus Krausehttps://news.typo3.com/security/advisory/typo3-ext-sa-2016-020It has been discovered that the extension "Page path" (pagepath) is susceptible to Insecure Unserialize. https://news.typo3.com/security/advisory/typo3-ext-sa-2016-019https://news.typo3.com/security/advisory/typo3-ext-sa-2016-019#commentsThu, 07 Jul 2016 12:00:00 +0200Marcus Krausehttps://news.typo3.com/security/advisory/typo3-ext-sa-2016-019It has been discovered that the extension "CCDebug" (cc_debug) is susceptible to Cross-Site Scripting.