medium4.0
CVE-2009-1264
Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticate…
Impact
Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Stanislas Rolland | Sr Feuser Register | through 2.5.20 Versions 1.4, 1.6, 2.2.1, 2.2.7, 2.2.8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/53278
- http://secunia.com/advisories/34586
- http://typo3.org/extensions/repository/view/sr_feuser_register/2.5.21/
- http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-004/
- http://www.securityfocus.com/bid/34374
- http://www.vupen.com/english/advisories/2009/0938
- http://osvdb.org/53278
- http://secunia.com/advisories/34586
- http://typo3.org/extensions/repository/view/sr_feuser_register/2.5.21/
- http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-004/
- http://www.securityfocus.com/bid/34374
- http://www.vupen.com/english/advisories/2009/0938