TYPO3 News & Events Hub
What’s new & what’s comin’
Register now for a TYPO3 Agency Meetup 2016 near you!
TYPO3 Conference “T3CON16,” October 26-27 in Munich - Call for Speakers and Papers
Under the motto "MAKE INNOVATION HAPPEN," the world's largest event for the TYPO3 community will be held this year in Munich from October 26-27. By organizing both a Business Day and a Future Day, IT decision makers, agencies, marketing managers, developers, designers and editors will be approached equally so that they can learn more about current and future-oriented developments and potential applications for the topics of TYPO3, content management and web in general. The whole program will be rounded off by a two-day Expo that the products and innovations will be presented at.
TYPO3-EXT-SA-2016-017: Information Disclosure in "MMC directmail subscription" (mmc_directmail_subscription)
It has been discovered that the extension "MMC directmail subscription" (mmc_directmail_subscription) is susceptible to Information Disclosure.
TYPO3-EXT-SA-2016-016: Multiple vulnerabilities in extension "http:BL Blocking" (mh_httpbl)
It has been discovered that the extension "http:BL Blocking" (mh_httpbl) is susceptible to SQL Injection and Cross-Site Scripting.
TYPO3-EXT-SA-2016-015: Non-Persistent Cross-Site Scripting in extension "Static Methods since 2007" (div2007)
It has been discovered that the extension "Static Methods since 2007" (div2007) is susceptible to Cross-Site Scripting.
TYPO3-EXT-SA-2016-014: Information Disclosure in extension "Questionnaire" (ke_questionnaire)
It has been discovered that the extension "Questionnaire" (ke_questionnaire) is susceptible to Information Disclosure.
TYPO3-EXT-SA-2016-013: SQL Injection in extension "Browser - TYPO3 without PHP" (browser)
It has been discovered that the extension "Browser - TYPO3 without PHP" (browser) is susceptible to SQL Injection.
This Week in TYPO3 (2016, Week 20)
In this episode special attention for this year’s T3Rookies initiative. There is a new Kid on the Block: Usergroup Greece, more bootup days, updated manuals and focus on accessibility.
TYPO3-EXT-SA-2016-012: Path Traversal in extension "Media management" (media)
It has been discovered that the extension "Media management" (media) is susceptible to Path Traversal.
TYPO3-EXT-SA-2016-011: Cross-Site Scripting in extension "Formhandler" (formhandler)
It has been discovered that the extension "Formhandler" (formhandler) is susceptible to Cross-Site Scripting.