CVE-2012-5890 in Sr Feuser Register
Summary
The Front End User Registration (sr_feuser_register) extension before 2.6.2 for TYPO3 allows remote attackers to obtain user names and passwords via the (1) edit perspective or (2) autologin feature.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
11/17/2012
Disclosure
11/17/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 62936 | Stanislas Rolland Sr Feuser Register Login information disclosure | 200 | Unproven | Official fix | CVE-2012-5890 |