CVE-2008-2275

sr_feuser_register_extension <=2.5.9 - Remote Code Execution & Arbitrary File Deletion

Title source: llm
STIX 2.1

Description

Unspecified vulnerability in sr_feuser_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9 extension for TYPO3 allows remote attackers to execute arbitrary code and delete arbitrary files via unspecified attack vectors.

References (4)

Core 4
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30275
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/29239
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/42445

Scores

EPSS 0.0185
EPSS Percentile 83.3%

Details

CWE
CWE-94
Status published
Products (20)
typo3/sr_feuser_register_extension 1.4.0
typo3/sr_feuser_register_extension 1.6.0
typo3/sr_feuser_register_extension 2.2.1
typo3/sr_feuser_register_extension 2.2.2
typo3/sr_feuser_register_extension 2.2.3
typo3/sr_feuser_register_extension 2.2.4
typo3/sr_feuser_register_extension 2.2.5
typo3/sr_feuser_register_extension 2.2.6
typo3/sr_feuser_register_extension 2.2.7
typo3/sr_feuser_register_extension 2.4.0
... and 10 more
Published May 16, 2008
Tracked Since Feb 18, 2026