Vulnerabilities

TI-2014-05169 CVE-2014-6288 · GHSA-2jq7-pgqq-gqqj

The powermail extension 2.x before 2.0.11 for TYPO3 allows remote attackers to bypass the…

LOW 37

The powermail extension 2.x before 2.0.11 for TYPO3 allows remote attackers to bypass the CAPTCHA protection mechanism via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01912 Published 2014-10-03 Fixed in 2.0.11 CWE-264

TI-2014-03219 CVE-2014-3947 · GHSA-m278-c6gg-4jrr

Unrestricted file upload vulnerability in the powermail extension before 1.6.11 and 2.x…

LOW 37

Unrestricted file upload vulnerability in the powermail extension before 1.6.11 and 2.x before 2.0.14 for TYPO3 allows remote attackers to execute arbitrary code by uploading a file with a crafted extension, then accessi…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02326 Published 2014-10-03 Fixed in 1.6.11, 2.0.14 CWE-94

TI-2014-03220 CVE-2014-3948 · GHSA-hv79-cwhv-wvc9

Cross-site scripting (XSS) vulnerability in the HTML export wizard in the backend module…

LOW 22

Cross-site scripting (XSS) vulnerability in the HTML export wizard in the backend module in the powermail extension before 1.6.11 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified v…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01161 Published 2014-06-04 No fix listed CWE-79

TI-2012-04914 CVE-2012-5889 · GHSA-8cg3-jfjx-3pp2

Cross-site scripting (XSS) vulnerability in the powermail extension before 1.6.5 for…

LOW 22

Cross-site scripting (XSS) vulnerability in the powermail extension before 1.6.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00931 Published 2012-11-17 Fixed in 1.6.5 CWE-79

TI-2010-04615 CVE-2010-4892 · GHSA-776f-4xpg-qpx8

Cross-site scripting (XSS) vulnerability in the powermail extension before 1.5.5 for…

LOW 22

Cross-site scripting (XSS) vulnerability in the powermail extension before 1.5.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01042 Published 2011-10-07 No fix listed CWE-79

TI-2010-03511 CVE-2010-3687 · GHSA-m2c3-39pw-7fwx

Unspecified vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows…

LOW 25

Unspecified vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to bypass validation have an unspecified impact by "[injecting] arbitrary values into validated fields," as demonst…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01209 Published 2010-09-29 No fix listed

TI-2010-03434 CVE-2010-3605 · GHSA-q9r5-7v2x-fr4m

Cross-site scripting (XSS) vulnerability in the powermail extension 1.5.3 and earlier for…

LOW 22

Cross-site scripting (XSS) vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01022 Published 2010-09-24 No fix listed CWE-79

TI-2010-03433 CVE-2010-3604 · GHSA-rp53-fw29-rxg3

SQL injection vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows…

LOW 35

SQL injection vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01051 Published 2010-09-24 Fixed in 1.5.4 CWE-89

TI-2010-00316 CVE-2010-0329 · GHSA-mgw4-gv3f-g57j

SQL injection vulnerability in the powermail extension 1.5.1 and earlier for TYPO3 allows…

LOW 35

SQL injection vulnerability in the powermail extension 1.5.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to the "SQL selection field" and "typoscript."

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01063 Published 2010-01-15 Fixed in 1.5.2 CWE-89

Vulnerabilities

Filters