CVE-2025-48200

The srfeuserregister extension through 12.4.8 for TYPO3 allows Remote Code Execution...

CVE-2025-48200

The srfeuserregister extension through 12.4.8 for TYPO3 allows Remote Code Execution...

CVE-2025-48200: Deserialization of Untrusted Data

The srfeuserregister extension through 12.4.8 for TYPO3 allows Remote Code Execution...

CVE-2025-48205: Direct Request

The srfeuserregister extension through 12.4.8 for TYPO3 allows Insecure Direct Object Reference...

CVE-2009-1264

Frontend User Registration srfeuserregister extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors...

CVE-2009-1264

The CVE concerns TYPO3 Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier, where access rights were not properly verified, allowing remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors. Affected versions are 2.5.20 and e...

CVE-2008-2274

Cross-site scripting XSS vulnerability in the srfeuserregister 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9 extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-2274

CVE-2008-2274 is a cross-site scripting (XSS) vulnerability in the TYPO3 sr_feuser_register extension affecting multiple versions (1.4.0, 1.6.0, 2.2.x up to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9). The underlying issue allows remote attackers to inject arbitrary web script or HTML via u...

CVE-2008-2275: Improper Control of Generation of Code

Unspecified vulnerability in srfeuserregister 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9 extension for TYPO3 allows remote attackers to execute arbitrary code and delete arbitrary files via unspecified attack vectors...

CVE-2008-2274: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the srfeuserregister 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9 extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...