[TYPO3] Picture 'click to enlarge' hacked

[R. van Twisk]

Jens Sambale wrote:
> Christoph Koehler schrieb:
>   
>> On Tue, 26 Sep 2006 07:25:00 -0500, Rik den Braber <dbisnl at gmail.com>
>> wrote:
>>
>>     
>>> Hi,
>>>
>>> On one site I work on for a friend the 'click to enlarge' picture option
>>> doesn't make the picture open in a new window, but instead takes the
>>> visitor
>>> to a page on wikipedia (http://en.wikipedia.org/wiki/Script_kiddie). I
>>> did
>>> not change anything  to make this behavior happen, so does anyone know
>>> how
>>> or where this is caused and how to solve it?
>>> I use typo3 3.8.1.
>>>
>>> I hope anyone has a solution.....
>>>
>>> TIA
>>>
>>> Rik <typo3-english at lists.netfielders.de>
>>>       
>> If I remember right there was such a vulnerability in that version.
>> Upgrade to 4.0.2.
>>     
>
> please!
> is there more information on this?
> I maintain a couple of 3.8.0 and 3.8.1 sites and would hate to upgrade
> all of them
> _______________________________________________
>   

Well you should....

But isn0t the bug not in bugtrack? or contact the security tream.

Ries