Vulnerabilities > Stanislas Rolland > SR Feuser Register > 1.6.6
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2012-11-17 | CVE-2012-5890 | Information Exposure vulnerability in Stanislas Rolland SR Feuser Register The Front End User Registration (sr_feuser_register) extension before 2.6.2 for TYPO3 allows remote attackers to obtain user names and passwords via the (1) edit perspective or (2) autologin feature. | 5.0 |
2009-04-07 | CVE-2009-1264 | Permissions, Privileges, and Access Controls vulnerability in Stanislas Rolland SR Feuser Register Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors. | 4.0 |