(#Several vulnerabilities were reported in third-party components of TYPO3:#- TC Directmail : unvalidated redirect. A remote attacker could exploit it by enticing his victim into following a specially crafted link in order to redirect to a malicious website. This vulnerability stems from a lack of validation of user-supplied input##- Member Infosheets: SQL injection. A remote attacker could exploit it by sending crafted requests that include SQL statements in order to modify or delete entries in some database tables##- Secure Download Form: cross-site scripting. A remote attacker could exploit it by enticing their victim into following a specially formed link in order to execute arbitrary JavaScript or HTML code##- Shibboleth Authentication: SQL injection. A remote attacker could exploit it by sending crafted requests that include SQL statements in order to modify or delete entries in some database tables##- Code Highlighter : insecure unserialize and SQL injection##- Store Locator : cross-site scripting. A remote attacker could exploit it by enticing their victim into following a specially formed link in order to execute arbitrary JavaScript or HTML code.)
