Vulnerabilities in multiple third party TYPO3 CMS extensions
Dear TYPO3 users, several vulnerabilities have been found in the following third party TYPO3 extensions: "LDAP" (eu_ldap) "News system" (news) "Adminer" (t3adminer) "Zend Framework Integration" (zend_framework) "Typo3 Quixplorer" (t3quixplorer) "http:BL Blocking" (mh_httpbl) "MK Forms" (mkforms) For further information on the issues, please read the related advisories TYPO3-EXT-SA-2015-016, TYPO3-EXT-SA-2015-017, TYPO3-EXT-SA-2015-018, TYPO3-EXT-SA-2015-019, TYPO3-EXT-SA-2015-020, TYPO3-EXT-SA-2015-021, TYPO3-EXT-SA-2015-022 which were published today: http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2015-016/ http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2015-017/ http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2015-018/ http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2015-019/ http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2015-020/ http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2015-021/ http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2015-022/ In general the TYPO3 Security Team recommends to read the following pages: The TYPO3 Security Guide: http://docs.typo3.org/typo3cms/SecurityGuide/ Make sure you are subscribed to the TYPO3 Announce List: http://lists.typo3.org/cgi-bin/mailman/listinfo/typo3-announce See all TYPO3 security advisories: http://typo3.org/teams/security/security-bulletins/ Regards, Helmut Hummel Member of the TYPO3 Security Team -- TYPO3 Security Team homepage: http://typo3.org/teams/security/ E-Mail: security@typo3.org