Security Advisories

All Advisories

Follow TYPO3 security advisories as soon as they are published by subscribing to the dedicated security RSS feed.

Subscribe to TYPO3 security advisories

Security

TYPO3-20051114-3: TYPO3 Security Bulletin

Ekkehard Gümbel

14 November 2005

Various security issues have been reported for PhpMyAdmin (see www.securityfocus.com/bid/15196 for details.)

Ekkehard Gümbel

14 November 2005

A Cross Site Scripting issue has been found in showpic.php.

Ekkehard Gümbel

14 November 2005

The file editor functionality in the TYPO3 Install Tool (menu option "Edit files in typo3conf/") has an option that reads "Make backup copy". If set, this will create a backup copy and append a "~" to the original file name. This leads to file names that may be delivered as text files by a web server. Thus, sensitive information (e.g. the content of localconf.php) may be disclosed.

Ekkehard Gümbel

07 November 2005

Two security bulletins regarding the 3rd party extensions "CHC Forum" and "th_mailformplus" have been issued today. Fixed versions are available.

Security

TYPO3-20051107-2: th_mailformplus

Ekkehard Gümbel

07 November 2005

A weakness in the form validation of th_mailformplus has been discovered that may be abused to inject additional recipients in mail forms.

Security

TYPO3-20051107-1: chc_forum

Ekkehard Gümbel

07 November 2005

A bug has been discovered in the "CHC Forum" (chc_forum) extension where some Javascript expressions are not properly caught when entered in forms. Thus, specially crafted entries may be used to inject malicious code.

Ekkehard Gümbel

10 October 2005

A bug has been discovered in the "Front End News Submitter" (fe_news) where SQL injection is not safely prevented. fe_rtenews is affected as well.

Security

TYPO3-20051010-10: TYPO3 Security Bulletin

Ekkehard Gümbel

10 October 2005

A bug has been discovered in the "Front End News Submitter" (fe_news) where SQL injection is not safely prevented and thus malicious SQL commands are potentially possible. Since the RTE enabled version (fe_rtenews) is derived from fe_news, it is affected as well.