[Typo3] SQL Injection

Taylor, Jeff JTaylor at venterinstitute.org
Fri Mar 4 15:39:51 CET 2005

I received the message approx. 30 minutes after this post.


-----Original Message-----
From: typo3-english-bounces at lists.netfielders.de
[mailto:typo3-english-bounces at lists.netfielders.de] On Behalf Of Michael
Sent: Friday, March 04, 2005 9:10 AM
To: typo3-english at lists.netfielders.de
Subject: RE: [Typo3] SQL Injection

Hi Taylor,

> I hate to be a party pooper, but this was posted on SECURITY FOCUS.
> already "public"
> Alerting the entire "typo3 community" about it is important to one,
> people know to watch out for it and two to encourage someone to fix
> problem immediately.  A lot more people, including "hackers," read
> security focus than this little newsgroup/listserv.
> Can we focus on getting it fixed rather than complaining that it was
> posted in the wrong place?  I'd work on fixing it but I don't have
> enough knowledge to do it.

It has been fixed and announced on typo3-announce.

One more announcement on typo3.org is going to be published shortly.

Everybody who is not yet subscribed to
typo3-announce at lists.netfielders.de
should do that IMMEDIATELY because this is the channel where we publish

(Was already posted this morning, btw.)

- michael
Want support? Please read the list rules first:
Typo3-english mailing list
Typo3-english at lists.netfielders.de

More information about the TYPO3-english mailing list