TYPO3-EXT-SA-2019-012: Arbitrary file Upload in extension "Yet Another Gallery" (yag)
- Release Date: May 07, 2019
- Component Type: Third party extension. This extension is not a part of the TYPO3 default installation.
- Vulnerability…
TYPO3-EXT-SA-2019-011: SQL Injection in extension "Event Calender" (pits_wd_calender)
- Release Date: May 07, 2019
- Component Type: Third party extension. This extension is not a part of the TYPO3 default installation.
- Vulnerability…
TYPO3-EXT-SA-2019-010: Cross Site Scripting in extension "Instagram" (ws_instagram)
- Release Date: May 07, 2019
- Component Type: Third party extension. This extension is not a part of the TYPO3 default installation.
- Vulnerability…
TYPO3-EXT-SA-2019-009: Cross Site Scripting in extension "gkh RSS Import" (gkh_rss_import)
- Release Date: May 07, 2019
- Component Type: Third party extension. This extension is not a part of the TYPO3 default installation.
- Vulnerability…
TYPO3-EXT-SA-2019-008: Multiple vulnerabilities in extension "phpMyAdmin" (phpmyadmin)
- Release Date: May 07, 2019
- Component Type: Third party extension. This extension is not a part of the TYPO3 default installation.
- Vulnerability…
TYPO3-EXT-SA-2019-007: Remote Code Execution in extension "ImageOptimizer" (imageoptimizer)
- Release Date: May 07, 2019
- Component Type: Third party extension. This extension is not a part of the TYPO3 default installation.
- Vulnerability…
TYPO3-EXT-SA-2019-006: Open Redirect in extension "Hairu" (hairu)
- Release Date: May 07, 2019
- Component Type: Third party extension. This extension is not a part of the TYPO3 default installation.
- Vulnerability…
TYPO3-EXT-SA-2019-005: SQL Injection in extension "Faceted Search" (ke_search)
- Release Date: May 07, 2019
- Component Type: Third party extension. This extension is not a part of the TYPO3 default installation.
- Vulnerability…
TYPO3-PSA-2019-006: Security Misconfiguration since TYPO3 9.4.0
- Release Date: May 7, 2019
- Component Type: Salted Passwords (bundled in TYPO3 core package, ext:core)
- Impact: Security Misconfiguration
- Affected…
TYPO3-PSA-2019-005: Cross-Site Scripting in Bootstrap CSS toolkit before 3.4.1 and 4.3.0
- Release Date: May 7, 2019
- Component Type: Bootstrap CSS toolkit (bundled in TYPO3 core package, ext:core)
- Impact: Cross-Site Scripting, Known…