medium6.4
CVE-2014-6292
The femanager extension before 1.0.9 for TYPO3 allows remote frontend users to modify or delete the records of other frontend users via unspecified vectors.
Impact
The femanager extension before 1.0.9 for TYPO3 allows remote frontend users to modify or delete the records of other frontend users via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| In2code | Femanager | through 1.0.8 Versions 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4 |
References
- NVD record
- CVE.org record
- http://typo3.org/extensions/repository/view/femanager
- http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-002/
- http://typo3.org/extensions/repository/view/femanager
- http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-002/