SecurityFocus

TYPO3 SQL Injection vunerabilitie Mar 03 2005 05:08PM
Fabian Becker (neonomicus gmx de) (2 replies)

Re: TYPO3 3rd party extension (cmw_linklist) SQL Injection vunerability Mar 04 2005 01:06PM
Michael Shigorin (mike osdn org ua)

Re: TYPO3 SQL Injection vunerabilitie Mar 03 2005 11:06PM
Sebastian Wolfgarten (sebastian wolfgarten com) (2 replies)

Hi Dennis,

I am pretty sure Fabian (Neonomicus) meant *every link* (or site) generated by
Typo3, didn't he? For instance if you search google for
"inurl:action=getviewcategory" I am pretty sure you will understand what he
meant (or am I wrong here)?

@Fabian (Neonomicus): Could you please provide more details about the
vulnerability you've discoveredl? By the way did you give the Typo3 guys
*enough* time to respond???

All the best,
Sebastian

[ reply ]

Re: TYPO3 SQL Injection vunerabilitie Mar 04 2005 04:45PM
Michael Shigorin (mike osdn org ua)

RE: TYPO3 SQL Injection vunerabilitie Mar 04 2005 12:54AM
GulfTech Security Research (security gulftech org)