Unrated severityNVD Advisory· Published Mar 13, 2009· Updated Jun 16, 2026

CVE-2008-6459

Description

SQL injection vulnerability in the auto BE User Registration (autobeuser) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected products

TYPO3/Autobeuser2 versions
cpe:2.3:a:typo3:autobeuser:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:typo3:autobeuser:*:*:*:*:*:*:*:*range: <=0.0.2
- (no CPE)range: <=0.0.2
TYPO3/auto BE User Registrationllm-fuzzy
Range: <=0.0.2

Patches

Vulnerability mechanics

References

typo3.org/teams/security/security-bulletins/typo3-20080919-1/nvdVendor Advisory
osvdb.org/48272nvd
www.securityfocus.com/bid/31239nvd
exchange.xforce.ibmcloud.com/vulnerabilities/45255nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000