Unscored severity · published May 16, 2008
CVE-2008-2275
Unspecified vulnerability in sr_feuser_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9 extension for TYPO3 allows remote attackers to execute…
–
CVSS
2.6%
EPSS
No
On KEV
Description
Unspecified vulnerability in sr_feuser_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9 extension for TYPO3 allows remote attackers to execute arbitrary code and delete arbitrary files via unspecified attack vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SF
SR Feuser Register Extension · Typo3
1.4.0; 1.6.0; 2.2.1; 2.2.2; 2.2.3; 2.2.4; +14 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2275
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2275
Vendor Advisory
http://secunia.com/advisories/30275
Patch
http://typo3.org/teams/security/security-bulletins/typo3-20080515-1/
www.securityfocus.com
http://www.securityfocus.com/bid/29239
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/42445
More from SR Feuser Register Extension
–
CVE-2008-2274
Cross-site scripting (XSS) vulnerability in the sr_feuser_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9 extension for TYPO3 allows remote…