SECURITY-ISSUES-IN-TWO-THIRD-PARTY-EXTENSIONS: Security issues in two third party extensions

Several vulnerabilities have been discovered in the third party TYPO3 extensions Formhandler and Questionaire

For further information on the issue in extension Formhandler, please read the related advisory TYPO3-EXT-SA-2011-003 that was published today:
https://typo3.org/security/advisory/typo3-ext-sa-2011-003/

For further information on the issue in extension Questionaire (pbsurvey), please read the related advisory TYPO3-EXT-SA-2011-004 that was published today:
https://typo3.org/security/advisory/typo3-ext-sa-2011-004/

In general the TYPO3 Security Team recommends to read the following pages:

• The TYPO3 Security Guide: https://docs.typo3.org/m/typo3/reference-coreapi/main/en-us/Security/Index.html#security-guidelines
• Make sure you are subscribed to the TYPO3 Announce List: http://lists.typo3.org/cgi-bin/mailman/listinfo/typo3-announce
• See all TYPO3 security advisories