Author: Marcus Krause
TYPO3-EXT-SA-2013-005: Several vulnerabilities in third party extensions
Several vulnerabilities have been found in the following third-party TYPO3 extensions: fed, myquizpoll, push2rss_3ds, slideshare, wec_discussion
Read moreTYPO3-EXT-SA-2013-004: Cross-Site Scripting vulnerability in extension Static Info Tables (static_info_tables)
It has been discovered that the extension "Static Info Tables" (static_info_tables) is vulnerable to Cross-Site Scripting.
TYPO3-EXT-SA-2013-003: SQL Injection vulnerability in extension CoolURI (cooluri)
It has been discovered that the extension "CoolURI" (cooluri) is vulnerable to SQL Injection.
TYPO3-EXT-SA-2013-002: Several vulnerabilities in third party extensions
Several vulnerabilities have been found in the following third-party TYPO3 extensions: attacalendar, attacpetition, eu_subscribe, exinit_job_offer, fefilebrowser, js_css_optimizer, kk_csv2table, lonewsseo, mn_mysql2json, news_search, tipafriend_plus, twitter_auth, sofortueberweisung2commerce, sys_messages
TYPO3-EXT-SA-2012-013: Several Vulnerabilities in extension commerce (commerce)
It has been discovered that the extension commerce (commerce) is vulnerable to Cross Site Scripting.
TYPO3-EXT-SA-2012-011: Cross-site scripting vulnerability in extension powermail for TYPO3 (powermail)
It has been discovered that the extension "powermail" (powermail) is vulnerable to Cross-Site Scripting, SQL Injection and Arbitrary Code Execution.
TYPO3-CORE-SA-2012-003: Cross-Site Scripting Vulnerability in TYPO3 Core
It has been discovered that TYPO3 Core is vulnerable to Cross-Site Scripting.
TYPO3-EXT-SA-2012-007: SQL Injection vulnerability in extension Basic SEO Features (seo_basics)
It has been discovered that the extension "Basic SEO Features" (seo_basics) is vulnerable to SQL Injection.
TYPO3-EXT-SA-2012-006: Cross-Site Scripting vulnerability in extension Basic SEO Features (seo_basics)
It has been discovered that the extension "Basic SEO Features" (seo_basics) is vulnerable to Cross-Site Scripting
TYPO3-EXT-SA-2012-005: Several vulnerabilities in third party extensions
Several vulnerabilities have been found in the following third-party TYPO3 extensions: fe_whois, cag_tables, additional_reports, general_data_display, realty, dkd_feuser_belogin, tc_fbconnect, dix_easylogin, ajado_facebook, facebook2t3, sociallogin2t3, kb_eventboard, news