The sf_event_mgt (aka Event management and registration) extension prior to 4.3.1 and 5.x prior to 5.1.1 for TYPO3 allows Information Disclosure (participant data, and event data via email) because of Broken Access Control.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
derhansen event management and registration |