Author: Torben Hansen
TYPO3-EXT-SA-2017-014: Cross Site-Scripting in extension "Multishop" (multishop)
It has been discovered that the extension "Multishop" (multishop) is susceptible to Cross-Site Scripting.
Read moreTYPO3-EXT-SA-2017-013: Cross Site-Scripting in extension "CAB FAL search" (falsearch)
It has been discovered that the extension "CAB FAL search" (falsearch) is susceptible to Cross-Site Scripting.
TYPO3-EXT-SA-2017-012: Arbitrary File Disclosure in extension "restler" (restler)
It has been discovered that the extension "restler" (restler) is susceptible to Arbitrary File Disclosure.
TYPO3-EXT-SA-2017-011: Cross Site-Scripting in extension "Formhandler" (formhandler)
It has been discovered that the extension "Formhandler" (formhandler) is susceptible to Cross-Site Scripting.
TYPO3-EXT-SA-2017-010: Cross Site-Scripting in extension "Recommend page " (pb_recommend_page)
It has been discovered that the extension "Recommend page " (pb_recommend_page) is susceptible to Cross-Site Scripting.
TYPO3-EXT-SA-2017-009: Cross Site-Scripting in extension "T3Blog Extbase" (t3extblog)
It has been discovered that the extension "T3Blog Extbase" (t3extblog) is susceptible to Cross-Site Scripting.
TYPO3-EXT-SA-2017-008: Multiple vulnerabilities in extension "File manager" (ameos_filemanager)
It has been discovered that the extension "File manager" (ameos_filemanager) is susceptible to Remote Code Execution, SQL Injection and Information Disclosure.
TYPO3-EXT-SA-2017-003: SQL Injection in extension "Faceted Search" (ke_search)
It has been discovered that the extension "Faceted Search" (ke_search) is susceptible to SQL Injection.
TYPO3-EXT-SA-2017-004: Remote Code Execution in extension "Maag Sendmail" (maag_sendmail)
It has been discovered that the extension "Maag Sendmail" (maag_sendmail) is susceptible to Remote Code Execution.
TYPO3-EXT-SA-2017-005: Remote Code Execution in extension "AH Sendmail" (ah_sendmail)
It has been discovered that the extension "AH Sendmail" (ah_sendmail) is susceptible to Remote Code Execution.