Search vulnerabilities

Results 4

Export CSV
CVE-2009-1264

Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors.

CVSS 2.0 · 4.0 Medium EPSS 1.2% KEV · Not listed
CVE-2009-3818

Unspecified vulnerability in the session handling feature in freeCap CAPTCHA (sr_freecap) extension 1.2.0 and earlier for TYPO3 has unknown impact and attack vectors.

CVSS 2.0 · 10.0 Critical EPSS 1.2% KEV · Not listed
Products
CVE-2012-5890

The Front End User Registration (sr_feuser_register) extension before 2.6.2 for TYPO3 allows remote attackers to obtain user names and passwords via the (1) edit perspective or (2) autologin feature.

CVSS 2.0 · 5.0 Medium EPSS 1.4% KEV · Not listed
CVE-2013-5323

Cross-site scripting (XSS) vulnerability in the Static Info Tables (static_info_tables) extension before 2.3.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0 · 4.3 Medium EPSS 1.3% KEV · Not listed