TYPO3-EXT-SA-2016-003: Cross-Site Scripting in extension "Google Sitemap" (enter_new_weeaar_googlesitemap)
It has been discovered that the extension "Google Sitemap" (enter_new_weeaar_googlesitemap) is susceptible to Cross-Site Scripting.
Read moreTYPO3-EXT-SA-2016-002: Cross-Site Scripting in extension "List frontend users" (listfeusers)
It has been discovered that the extension "List frontend users" (listfeusers) is susceptible to Cross-Site Scripting.
TYPO3-EXT-SA-2016-001: Information Disclosure in extension "UTOPIA" (ics_utopia)
It has been discovered that the extension "UTOPIA" (ics_utopia) is susceptible to Information Disclosure.
TYPO3-EXT-SA-2015-022: Arbitrary Code Execution in extension "MK Forms" (mkforms)
It has been discovered that the extension "MK Forms" (mkforms) is susceptible to Arbitrary Code Execution
TYPO3-EXT-SA-2015-021: SQL Injection in extension "http:BL Blocking" (mh_httpbl)
It has been discovered that the extension "http:BL Blocking" (mh_httpbl) is susceptible to SQL Injection.
TYPO3-EXT-SA-2015-020: Cross-Site Request Forgery in extension "Typo3 Quixplorer" (t3quixplorer)
It has been discovered that the extension "Typo3 Quixplorer" (t3quixplorer) is susceptible to Cross-Site Request Forgery.
TYPO3-EXT-SA-2015-019: File Disclosure in extension "Zend Framework Integration" (zend_framework)
It has been discovered that the extension "Zend Framework Integration" (zend_framework) is susceptible to File Disclosure.
TYPO3-EXT-SA-2015-018: Information Disclosure in extension "Adminer" (t3adminer)
It has been discovered that the extension "Adminer" (t3adminer) is susceptible to Information Disclosure.
TYPO3-EXT-SA-2015-017: Cross-Site Scripting in extension "News system" (news)
It has been discovered that the extension "News system" (news) is susceptible to Cross-Site Scripting.
TYPO3-EXT-SA-2015-016: Information Disclosure in extension "LDAP" (eu_ldap)
It has been discovered that the extension "LDAP" (eu_ldap) is susceptible to Information Disclosure.