TYPO3 News & Events Hub
What’s New & What’s Coming
Cross-Site Scripting vulnerability in extension mm_forum (mm_forum)
It has been discovered that the extension mm_forum (mm_forum) is vulnerable to Cross-Site Scripting.
Read moreMultiple vulnerabilities in third party extensions
Several vulnerabilities have been found in the following third party TYPO3 extensions: Brainstorming (brainstorming), Power Extension Manager (ch_lightem), Sellector.com Widget Integration (chsellector), Educator (educator), MK Wastebasket...
Security issues in several third party TYPO3 extensions including "mm_forum" (mm_forum)
A security vulnerabilities has been discovered in the third party TYPO3 extensions including mm_forum, brainstorming, ch_lightem, chsellector, educator, mk_wastebasket, mydashboard, nf_cleandb, pd_diocesedatabase, reports_logview, sav_filter_abc,...
The Bug Days are back!
The Bug Days went dormant for a couple of months, but they're not dead! Join us on Friday, March 26th.
Extbase Quickstart Documentation Released
During the TYPO3 snowboard tour (T3BOARD10) in Laax last week the Extbase quickstart documentation was improved and finished by Franz Ripfel from A.BE.ZET. Its aim is to help you get a first impression of how Extbase based extensions are working and...
Google Summer of Code 2010 coming up
We are excited that Google Summer of Code is underway again this year. After having had a successful first Google Summer of Code last year</link>, we are happy to also apply for GSoC 2010. We're looking for help to make this years Summer of Code...
Blind SQL Injection vulnerability in extension Calendar Base (cal)
It has been discovered that the extension Calendar Base (cal) is vulnerable to Blind SQL Injection.
Security issue in third party TYPO3 extension "Calendar Base" (cal)
A security vulnerabilitiy has been discovered in the third party TYPO3 extension "Calendar Base".
"What ever happened to..." the results of T3UXW09?
You might have heard of last years' TYPO3 coding week "TYPO3 User eXperience Week" where 30 TYPO3 enthusiasts met in a castle to bring TYPO3 closer to the user. This meant that these coders, designers and managers worked on all the things the user is...
Release of TYPO3 4.4alpha1 and the current status
Today, the TYPO3 community released the first alpha version of TYPO3 4.4. Although it's far from a final release, which is scheduled for a release in mid June, we're doing a lot of fine tuning and groundwork. You can consider this alpha version as a...
TYPO3 4.3.2 and 4.2.12 released
The TYPO3 Core Team announces versions 4.3.2 and 4.2.12 of the TYPO3 Enterprise Content Management System.
Security issues found in TYPO3 core
It has been discovered that TYPO3 Core is vulnerable to Cross-Site Scripting, Authentication Bypass for frontend users and Information Disclosure.
Vulnerabilities in TYPO3 Core
It has been discovered that TYPO3 Core is vulnerable to Cross-Site Scripting, Authentication Bypass for frontend users and Information Disclosure.
Support for TYPO3 4.0 is officially over
The end of life of TYPO3 4.0 was announced as a kind of footnote at the bottom of the security bulletin released on October 22, 2009. This triggered some discussion inside the Core Team and it was decided that the end of life of a given TYPO3 branch...
New maintenance policy
The TYPO3 Core Team is pleased to announce its new official maintenance policy for TYPO3 4.x.
TYPO3's first Google Summer of Code
The TYPO3 community was amazed when the project was selected to participate in Google Summer of Code 2009 – TYPO3's first Summer of Code ever. TYPO3 is an enterprise class Content Management System with its origin in Denmark with a 10 year history of...
typo3.org Relaunch
Relaunching typo3.org is finally on a solid road to success. d.k.d Internet Service GmbH from Frankfurt, Germany has been given the task to officially manage the project and handle the first step to implement the new design.
Security issues in third party TYPO3 extensions including t3blog
Security vulnerabilities have been discovered in third party TYPO3 extensions t3blog, eventmanagement, game_articledb, ml_career, ml_surprisecalendar, searchajaxgoogle and spr_downloadmanager
Security issues in third party TYPO3 extensions including t3blog (copy 1)
Security vulnerabilities have been discovered in third party TYPO3 extensions t3blog, eventmanagement, game_articledb, ml_career, ml_surprisecalendar, searchajaxgoogle and spr_downloadmanager
Security issues in third party TYPO3 extensions including t3blog (copy 2)
Security vulnerabilities have been discovered in third party TYPO3 extensions t3blog, eventmanagement, game_articledb, ml_career, ml_surprisecalendar, searchajaxgoogle and spr_downloadmanager