[TYPO3-dev] major security problem --> hacking of TYPO3 sites may be possible

Rupert Germann rupi at gmx.li
Sun Apr 30 17:14:52 CEST 2006


Hello Andreas

without having had a look to the mentioned bug reports I'd like to point you
to the fact that there is a typo3.security.team and that security related
issues should not be discussed on public lists.

please read: http://typo3.org/teams/security/


greets
rupert


Andreas Balzer wrote:

> See 0003386 and 0003385 in bug tracking. TYPO3 can be hacked by users
> that -->had<-- admin rights and users that even do not had them.
> 
> Should be fixed as soon as possible.
> 
> Greetings
> Andreas
> 
> P.S.: Any instructions for security related problems would be
> appreciated.. Just got hacked and wanted to report...





More information about the TYPO3-dev mailing list