--- title: "SECURITY-ISSUES-IN-SEVERAL-THIRD-PARTY-TYPO3-EXTENSIONS-INCLUDING-CAR-ABA-WATCHDOG-DR-BLOB-NL-LISTMAN-XDS-STAFF-DANP-DOCUMENTDIRS-STE-PRAYER2-PD-RESOURCES-HS-RELIGIOUSARTGALLERY-STE-PARISH-ADMIN-PD-CALENDAR: Security issues in several third party TYPO3 extensions including car, aba_watchdog, dr_blob, nl_listman, xds_staff, danp_documentdirs, ste_prayer2, pd_resources, hs_religiousartgallery, ste_parish_admin, pd_calendar" url: "https://news.typo3.com/security/advisory/security-issues-in-several-third-party-typo3-extensions-including-car-aba-watchdog-dr-blob-nl-listman-xds-staff-danp-documentdirs-ste-prayer2-pd-resources-hs-religiousartgallery-ste-parish-admin-pd-calendar" description: "Security vulnerabilities have been discovered in following third party TYPO3 extensions: Car (car), TYPO3 Watchdog (aba_watchdog), File list (dr_blob), ListMan (nl_listman), XDS Staff List (xds_staff), Document Directorys (danp_documentdirs), Random Prayer Version 2 (ste_prayer2), Diocese of Portsmouth Resources Database (pd_resources), Parish of the Holy Spirit Religious Art Gallery (hs_religiousartgallery), Parish Administration Database (ste_parish_admin), Diocese of Portsmouth Calendar (pd_calendar), Flash SlideShow (slideshow), Subscription (mf_subscription), No indexed Search (no_indexed_search), Job Exchange (jobexchange), Training Company Database (trainincdb), ZID Linkliste (zid_linklist), vShoutbox (vshoutbox), Frontend news submitter with RTE (fe_rtenews)" image: "https://news.typo3.com/_assets/d1e01514e4c4a5b3147940fa2ec50682/Images/og-image-news.jpg" date: 2026-06-11 modified: 2026-06-11 categories: - "Developer & Technology" - Security --- # SECURITY-ISSUES-IN-SEVERAL-THIRD-PARTY-TYPO3-EXTENSIONS-INCLUDING-CAR-ABA-WATCHDOG-DR-BLOB-NL-LISTMAN-XDS-STAFF-DANP-DOCUMENTDIRS-STE-PRAYER2-PD-RESOURCES-HS-RELIGIOUSARTGALLERY-STE-PARISH-ADMIN-PD-CALENDAR: Security issues in several third party TYPO3 extensions including car, aba_watchdog, dr_blob, nl_listman, xds_staff, danp_documentdirs, ste_prayer2, pd_resources, hs_religiousartgallery, ste_parish_admin, pd_calendar - [Developer & Technology](https://news.typo3.com/article/category/developer-technology) - [Security](https://news.typo3.com/article/category/security-1) SECURITY-ISSUES-IN-SEVERAL-THIRD-PARTY-TYPO3-EXTENSIONS-INCLUDING-CAR-ABA-WATCHDOG-DR-BLOB-NL-LISTMAN-XDS-STAFF-DANP-DOCUMENTDIRS-STE-PRAYER2-PD-RESOURCES-HS-RELIGIOUSARTGALLERY-STE-PARISH-ADMIN-PD-CALENDAR: Security issues in several third party TYPO3 extensions including car, aba\_watchdog, dr\_blob, nl\_listman, xds\_staff, danp\_documentdirs, ste\_prayer2, pd\_resources, hs\_religiousartgallery, ste\_parish\_admin, pd\_calendar =================================================================================================================================================================================================================================================================================================================================================================================================================================================== 15 December 2009 ![A laptop screen displaying a list of security advisories](https://news.typo3.com/typo3temp/assets/_processed_/d/c/csm_security_blog_default_77f8e86036.webp) Security vulnerabilities have been discovered in following third party TYPO3 extensions: Car (car), TYPO3 Watchdog (aba\_watchdog), File list (dr\_blob), ListMan (nl\_listman), XDS Staff List (xds\_staff), Document Directorys (danp\_documentdirs), Random Prayer Version 2 (ste\_prayer2), Diocese of Portsmouth Resources Database (pd\_resources), Parish of the Holy Spirit Religious Art Gallery (hs\_religiousartgallery), Parish Administration Database (ste\_parish\_admin), Diocese of Portsmouth Calendar (pd\_calendar), Flash SlideShow (slideshow), Subscription (mf\_subscription), No indexed Search (no\_indexed\_search), Job Exchange (jobexchange), Training Company Database (trainincdb), ZID Linkliste (zid\_linklist), vShoutbox (vshoutbox), Frontend news submitter with RTE (fe\_rtenews) - ![](https://news.typo3.com/typo3temp/assets/t3g/blog/gravatar/7569d41262328e5ed8d27b53e03970ec.png)[Helmut Hummel](https://news.typo3.com/article/author/helmut-hummel) For further information on all CSB (Collective Security Bulletin) issues, please read the related advisory TYPO3-SA-2009-020 that was published today: In general the TYPO3 Security Team recommends to read the following pages: The TYPO3 Security Cookbook: http://typo3.org/fileadmin/security-team/typo3\_security\_cookbook\_v-0.5.pdf Make sure you are subscribed to the TYPO3 Announce List: See all TYPO3 security advisories: http://typo3.org/teams/security/security-bulletins/ ![](https://news.typo3.com/typo3temp/assets/t3g/blog/gravatar/bb9efc51bced8582e7b8c235f4b5f2b5.png) About the Author [Helmut Hummel](https://news.typo3.com/article/author/helmut-hummel) [More posts by this author](https://news.typo3.com/article/author/helmut-hummel)