Unscored severity · published May 16, 2008
CVE-2008-2274
Cross-site scripting (XSS) vulnerability in the sr_feuser_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9 extension for TYPO3 allows remote…
–
CVSS
1%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the sr_feuser_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9 extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SF
SR Feuser Register Extension · Typo3
1.4.0; 1.6.0; 2.2.1; 2.2.2; 2.2.3; 2.2.4; +19 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2274
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2274
Patch
http://secunia.com/advisories/30275
Patch
http://typo3.org/teams/security/security-bulletins/typo3-20080515-1/
www.securityfocus.com
http://www.securityfocus.com/bid/29239
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/42443
More from SR Feuser Register Extension
–
CVE-2008-2275
Unspecified vulnerability in sr_feuser_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9 extension for TYPO3 allows remote attackers to execute…