TYPO3 Forge

2009-08-18

16:57 TYPO3 Core Bug #20886: Probable Cross-Site Scripting Vulnerability in showpic.php

I wasn't referring to moving the class, but to the solution. Ideally, an URL should look like http://example.com/show... Philipp Hagemeister

13:50 TYPO3 Core Bug #20886: Probable Cross-Site Scripting Vulnerability in showpic.php

1. Well, than please make sure this misfeature will not be included in typo3 v5. I updated from 3.8 to 4.2 only to fi... Philipp Hagemeister

2009-08-17

09:57 TYPO3 Core Bug #20886: Probable Cross-Site Scripting Vulnerability in showpic.php

After looking into it again, I cannot find the original indication of a weak encryption key in the current source.
... Philipp Hagemeister

2009-08-14

15:44 TYPO3 Core Bug #20886 (Closed): Probable Cross-Site Scripting Vulnerability in showpic.php

In typo3/sysext/cms/tslib/showpic.php:222+226, user input is outputted in an HTML document without any transformation... Philipp Hagemeister

14:44 TYPO3 Core Bug #20884 (Closed): Hardcoded parameter results in lengthy image rendering

In t3lib/class.t3lib_stdgraphic.php, about line 270, typo3 calls imagemagick with the argument -sharpen 50. This valu... Philipp Hagemeister