Frontend User Registration extension for TYPO3 does not properly verify access rights

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2009-1264 · ADVISORY
• TYPO3-extensions/sr_feuser_register · PACKAGE
• web.archive.org/web/20090527190538/http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-004 · WEB
• web.archive.org/web/20200228205603/http://www.securityfocus.com/bid/34374 · WEB
• typo3.org/extensions/repository/view/sr_feuser_register/2.5.21 · WEB
• osvdb.org/53278
• secunia.com/advisories/34586 · Vendor Advisory
• typo3.org/extensions/repository/view/sr_feuser_register/2.5.21 · Patch
• typo3.org/teams/security/security-bulletins/typo3-sa-2009-004 · Patch
• securityfocus.com/bid/34374 · Patch
• vupen.com/english/advisories/2009/0938 · Patch

sjbr/sr-feuser-register のその他の脆弱性

• CVE-2025-48205高 8.6The sr_feuser_register extension through 12.4.8 for TYPO3 allows Insecure Direct Object Reference.
• CVE-2025-48200緊急 10.0The sr_feuser_register extension through 12.4.8 for TYPO3 allows Remote Code Execution.
• CVE-2012-5890中 5.0The Front End User Registration (sr_feuser_register) extension before 2.6.2 for TYPO3 allows remote attackers to obtain user names and passw…