[TYPO3-dev] major security problem --> hacking of TYPO3 sites may be possible

Andreas Balzer eMail at andreas-balzer.de
Sun Apr 30 17:25:52 CEST 2006


Rupert Germann schrieb:
> Hello Andreas
> 
> without having had a look to the mentioned bug reports I'd like to point you
> to the fact that there is a typo3.security.team and that security related
> issues should not be discussed on public lists.
> 
> please read: http://typo3.org/teams/security/
> 
> 
> greets
> rupert
> 
> 
> Andreas Balzer wrote:
> 
>> See 0003386 and 0003385 in bug tracking. TYPO3 can be hacked by users
>> that -->had<-- admin rights and users that even do not had them.
>>
>> Should be fixed as soon as possible.
>>
>> Greetings
>> Andreas
>>
>> P.S.: Any instructions for security related problems would be
>> appreciated.. Just got hacked and wanted to report...
> 
ah thanks. that's the info i was looking for..




More information about the TYPO3-dev mailing list