CVE-2009-1264
Frontend User Registration extension for TYPO3 does not properly verify access rights
Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors.
Exploit likelihood
What each source reports
NVD Score used
Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors.
- Record
CVE-2009-1264- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:P/I:N/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors.
- Record
CVE-2009-1264- Updated
- 2026-11-02
EUVDEUVD-2009-1263 No score
Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors.
- Record
EUVD-2009-1263- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rjrq-93hp-22ww
Frontend User Registration extension for TYPO3 does not properly verify access rights
Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors.
- Record
GHSA-rjrq-93hp-22ww- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - Weakness
- CWE-284
- Updated
- 2026-11-02
OSVGHSA-rjrq-93hp-22ww
Frontend User Registration extension for TYPO3 does not properly verify access rights
Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors.
- Record
GHSA-rjrq-93hp-22ww- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - Weakness
- CWE-284
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sjbr/sr-feuser-registerPackagist |
before 2.5.21 | 2.5.21 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-1264 is a medium vulnerability (CVSS 4.0) in Stanislas Rolland Sr Feuser Register, published April 7, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.15%, the 67th percentile. Fixed in sjbr/sr-feuser-register 2.5.21.
References
typo3.org/extensions/repository/view/sr_feuser_register/2.5.21
osvdb.org/53278
vupen.com/english/advisories/2009/0938
secunia.com/advisories/34586
securityfocus.com/bid/34374
Show 5 moreShow less
nvd.nist.gov/vuln/detail/CVE-2009-1264
web.archive.org/web/20090527190538/http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-004
github.com/advisories/GHSA-rjrq-93hp-22ww