Author: Marcus Krause
TYPO3-EXT-SA-2015-019: File Disclosure in extension "Zend Framework Integration" (zend_framework)
It has been discovered that the extension "Zend Framework Integration" (zend_framework) is susceptible to File Disclosure.
Read moreTYPO3-EXT-SA-2015-018: Information Disclosure in extension "Adminer" (t3adminer)
It has been discovered that the extension "Adminer" (t3adminer) is susceptible to Information Disclosure.
TYPO3-EXT-SA-2015-017: Cross-Site Scripting in extension "News system" (news)
It has been discovered that the extension "News system" (news) is susceptible to Cross-Site Scripting.
TYPO3-EXT-SA-2015-016: Information Disclosure in extension "LDAP" (eu_ldap)
It has been discovered that the extension "LDAP" (eu_ldap) is susceptible to Information Disclosure.
TYPO3-EXT-SA-2015-015: Cross-Site Scripting in extension "404 Page not found handling" (pagenotfoundhandling)
It has been discovered that the extension "404 Page not found handling" (pagenotfoundhandling) is susceptible to Cross-Site Scripting
TYPO3-EXT-SA-2015-014: SQL Injection in extension "Akronymmanager" (sb_akronymmanager)
It has been discovered that the extension "Akronymmanager" (sb_akronymmanager) is susceptible to SQL Injection
TYPO3-EXT-SA-2015-013: Arbitrary Code Execution in extension Job Fair (jobfair)
It has been discovered that the extension "Job Fair" (jobfair) is susceptible to Arbitrary Code Execution
TYPO3-EXT-SA-2015-007: Cross-Site Scripting in extension BE User Log (beko_beuserlog)
It has been discovered that the extension "BE User Log" (beko_beuserlog) is susceptible to Cross-Site Scripting
TYPO3-EXT-SA-2015-006: Arbitrary Code Execution in extension Frontend User Upload (feupload)
It has been discovered that the extension "Frontend User Upload" (feupload) is susceptible to Arbitrary Code Execution
TYPO3-EXT-SA-2015-008: SQL Injection vulnerability in extension wt_directory (wt_directory)
It has been discovered that the extension "wt_directory" (wt_directory) is susceptible to SQL Injection