Search

Find a vulnerability

Search criteria

    4 vulnerabilities found for sr_feuser_register by stanislas_rolland

    CVE-2012-5890 (GCVE-0-2012-5890)

    Vulnerability from nvd – Published: 2012-11-17 21:00 – Updated: 2024-08-06 21:21
    VLAI
    Summary
    The Front End User Registration (sr_feuser_register) extension before 2.6.2 for TYPO3 allows remote attackers to obtain user names and passwords via the (1) edit perspective or (2) autologin feature.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    Date Public
    2012-03-28 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-06T21:21:28.229Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "typo3-frontenduser-multiple-info-disclosure(80145)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/80145"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://forge.typo3.org/projects/extension-sr_feuser_register/repository/revisions/58720"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-002/"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://forge.typo3.org/projects/extension-sr_feuser_register/repository/entry/trunk/ChangeLog"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2012-03-28T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "The Front End User Registration (sr_feuser_register) extension before 2.6.2 for TYPO3 allows remote attackers to obtain user names and passwords via the (1) edit perspective or (2) autologin feature."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-08-28T12:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "typo3-frontenduser-multiple-info-disclosure(80145)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/80145"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://forge.typo3.org/projects/extension-sr_feuser_register/repository/revisions/58720"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-002/"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://forge.typo3.org/projects/extension-sr_feuser_register/repository/entry/trunk/ChangeLog"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2012-5890",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "The Front End User Registration (sr_feuser_register) extension before 2.6.2 for TYPO3 allows remote attackers to obtain user names and passwords via the (1) edit perspective or (2) autologin feature."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "typo3-frontenduser-multiple-info-disclosure(80145)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/80145"
                },
                {
                  "name": "http://forge.typo3.org/projects/extension-sr_feuser_register/repository/revisions/58720",
                  "refsource": "CONFIRM",
                  "url": "http://forge.typo3.org/projects/extension-sr_feuser_register/repository/revisions/58720"
                },
                {
                  "name": "http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-002/",
                  "refsource": "MISC",
                  "url": "http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-002/"
                },
                {
                  "name": "http://forge.typo3.org/projects/extension-sr_feuser_register/repository/entry/trunk/ChangeLog",
                  "refsource": "CONFIRM",
                  "url": "http://forge.typo3.org/projects/extension-sr_feuser_register/repository/entry/trunk/ChangeLog"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2012-5890",
        "datePublished": "2012-11-17T21:00:00.000Z",
        "dateReserved": "2012-11-17T00:00:00.000Z",
        "dateUpdated": "2024-08-06T21:21:28.229Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2009-1264 (GCVE-0-2009-1264)

    Vulnerability from nvd – Published: 2009-04-07 23:00 – Updated: 2024-09-16 20:57
    VLAI
    Summary
    Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://typo3.org/extensions/repository/view/sr_fe… x_refsource_CONFIRM
    http://osvdb.org/53278 vdb-entryx_refsource_OSVDB
    http://www.vupen.com/english/advisories/2009/0938 vdb-entryx_refsource_VUPEN
    http://secunia.com/advisories/34586 third-party-advisoryx_refsource_SECUNIA
    http://www.securityfocus.com/bid/34374 vdb-entryx_refsource_BID
    http://typo3.org/teams/security/security-bulletin… x_refsource_CONFIRM
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T05:04:49.430Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://typo3.org/extensions/repository/view/sr_feuser_register/2.5.21/"
              },
              {
                "name": "53278",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://osvdb.org/53278"
              },
              {
                "name": "ADV-2009-0938",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2009/0938"
              },
              {
                "name": "34586",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/34586"
              },
              {
                "name": "34374",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/34374"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-004/"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2009-04-07T23:00:00.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://typo3.org/extensions/repository/view/sr_feuser_register/2.5.21/"
            },
            {
              "name": "53278",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://osvdb.org/53278"
            },
            {
              "name": "ADV-2009-0938",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2009/0938"
            },
            {
              "name": "34586",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/34586"
            },
            {
              "name": "34374",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/34374"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-004/"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2009-1264",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "http://typo3.org/extensions/repository/view/sr_feuser_register/2.5.21/",
                  "refsource": "CONFIRM",
                  "url": "http://typo3.org/extensions/repository/view/sr_feuser_register/2.5.21/"
                },
                {
                  "name": "53278",
                  "refsource": "OSVDB",
                  "url": "http://osvdb.org/53278"
                },
                {
                  "name": "ADV-2009-0938",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2009/0938"
                },
                {
                  "name": "34586",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/34586"
                },
                {
                  "name": "34374",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/34374"
                },
                {
                  "name": "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-004/",
                  "refsource": "CONFIRM",
                  "url": "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-004/"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2009-1264",
        "datePublished": "2009-04-07T23:00:00.000Z",
        "dateReserved": "2009-04-07T00:00:00.000Z",
        "dateUpdated": "2024-09-16T20:57:34.534Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2012-5890 (GCVE-0-2012-5890)

    Vulnerability from cvelistv5 – Published: 2012-11-17 21:00 – Updated: 2024-08-06 21:21
    VLAI
    Summary
    The Front End User Registration (sr_feuser_register) extension before 2.6.2 for TYPO3 allows remote attackers to obtain user names and passwords via the (1) edit perspective or (2) autologin feature.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    Date Public
    2012-03-28 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-06T21:21:28.229Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "typo3-frontenduser-multiple-info-disclosure(80145)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/80145"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://forge.typo3.org/projects/extension-sr_feuser_register/repository/revisions/58720"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-002/"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://forge.typo3.org/projects/extension-sr_feuser_register/repository/entry/trunk/ChangeLog"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2012-03-28T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "The Front End User Registration (sr_feuser_register) extension before 2.6.2 for TYPO3 allows remote attackers to obtain user names and passwords via the (1) edit perspective or (2) autologin feature."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-08-28T12:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "typo3-frontenduser-multiple-info-disclosure(80145)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/80145"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://forge.typo3.org/projects/extension-sr_feuser_register/repository/revisions/58720"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-002/"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://forge.typo3.org/projects/extension-sr_feuser_register/repository/entry/trunk/ChangeLog"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2012-5890",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "The Front End User Registration (sr_feuser_register) extension before 2.6.2 for TYPO3 allows remote attackers to obtain user names and passwords via the (1) edit perspective or (2) autologin feature."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "typo3-frontenduser-multiple-info-disclosure(80145)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/80145"
                },
                {
                  "name": "http://forge.typo3.org/projects/extension-sr_feuser_register/repository/revisions/58720",
                  "refsource": "CONFIRM",
                  "url": "http://forge.typo3.org/projects/extension-sr_feuser_register/repository/revisions/58720"
                },
                {
                  "name": "http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-002/",
                  "refsource": "MISC",
                  "url": "http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-002/"
                },
                {
                  "name": "http://forge.typo3.org/projects/extension-sr_feuser_register/repository/entry/trunk/ChangeLog",
                  "refsource": "CONFIRM",
                  "url": "http://forge.typo3.org/projects/extension-sr_feuser_register/repository/entry/trunk/ChangeLog"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2012-5890",
        "datePublished": "2012-11-17T21:00:00.000Z",
        "dateReserved": "2012-11-17T00:00:00.000Z",
        "dateUpdated": "2024-08-06T21:21:28.229Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2009-1264 (GCVE-0-2009-1264)

    Vulnerability from cvelistv5 – Published: 2009-04-07 23:00 – Updated: 2024-09-16 20:57
    VLAI
    Summary
    Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://typo3.org/extensions/repository/view/sr_fe… x_refsource_CONFIRM
    http://osvdb.org/53278 vdb-entryx_refsource_OSVDB
    http://www.vupen.com/english/advisories/2009/0938 vdb-entryx_refsource_VUPEN
    http://secunia.com/advisories/34586 third-party-advisoryx_refsource_SECUNIA
    http://www.securityfocus.com/bid/34374 vdb-entryx_refsource_BID
    http://typo3.org/teams/security/security-bulletin… x_refsource_CONFIRM
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T05:04:49.430Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://typo3.org/extensions/repository/view/sr_feuser_register/2.5.21/"
              },
              {
                "name": "53278",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://osvdb.org/53278"
              },
              {
                "name": "ADV-2009-0938",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2009/0938"
              },
              {
                "name": "34586",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/34586"
              },
              {
                "name": "34374",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/34374"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-004/"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2009-04-07T23:00:00.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://typo3.org/extensions/repository/view/sr_feuser_register/2.5.21/"
            },
            {
              "name": "53278",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://osvdb.org/53278"
            },
            {
              "name": "ADV-2009-0938",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2009/0938"
            },
            {
              "name": "34586",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/34586"
            },
            {
              "name": "34374",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/34374"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-004/"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2009-1264",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "http://typo3.org/extensions/repository/view/sr_feuser_register/2.5.21/",
                  "refsource": "CONFIRM",
                  "url": "http://typo3.org/extensions/repository/view/sr_feuser_register/2.5.21/"
                },
                {
                  "name": "53278",
                  "refsource": "OSVDB",
                  "url": "http://osvdb.org/53278"
                },
                {
                  "name": "ADV-2009-0938",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2009/0938"
                },
                {
                  "name": "34586",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/34586"
                },
                {
                  "name": "34374",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/34374"
                },
                {
                  "name": "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-004/",
                  "refsource": "CONFIRM",
                  "url": "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-004/"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2009-1264",
        "datePublished": "2009-04-07T23:00:00.000Z",
        "dateReserved": "2009-04-07T00:00:00.000Z",
        "dateUpdated": "2024-09-16T20:57:34.534Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }