The Front End User Registration (sr_feuser_register) extension before 2.6.2 for TYPO3 allows remote attackers to obtain user names and passwords via the (1) edit perspective or (2) autologin feature.
CVSS 2.0MEDIUM 5.0·Network·No auth·Interaction —·EPSS 0.01369·Published 2012-11-17·Fixed in 2.6.2CWE-200
Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via…
CVSS 2.0MEDIUM 4.0·Network·Low privileges·Interaction —·EPSS 0.01152·Published 2009-04-07·Fixed in 2.5.21CWE-264