TYPO3 femanager extension allows remote frontend users to modify or delete records of other frontend users

MEDIUM 6.4CVE-2014-6292 · GHSA-377v-8637-6vq6 · Published 03/10/2014 · updated 17/06/2026

Package	Affected versions	Patched versions
in2code/femanager Packagist	`< 1.0.9`	`1.0.9`
femanager in2code	`= 1.0.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.0.5= 1.0.6= 1.0.7≤ 1.0.8`	No fix yet

Description

The femanager extension before 1.0.9 for TYPO3 allows remote frontend users to modify or delete the records of other frontend users via unspecified vectors.

NVD description

The femanager extension before 1.0.9 for TYPO3 allows remote frontend users to modify or delete the records of other frontend users via unspecified vectors.

References

nvd.nist.gov/vuln/detail/CVE-2014-6292 · ADVISORY
in2code-de/femanager · PACKAGE
typo3.org/security/advisory/typo3-ext-sa-2014-002 · WEB
typo3.org/extensions/repository/view/femanager · WEB
typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-002 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free