VendorsAlex Kellnerpowermail1.3.15
Vulnerabilities

Alex Kellner Powermail 1.3.15

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2010-0329
SQL injection vulnerability in the powermail extension 1.5.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to the "SQL selection field" and "typoscript."
Published 2010-01-15 · Modified
7.5EPSS 0.011
CVE-2010-3604
SQL injection vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Published 2010-09-24 · Modified
7.5EPSS 0.011
CVE-2010-3687
Unspecified vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to bypass validation have an unspecified impact by "[injecting] arbitrary values into validated fields," as demonstrated using the (1) Email and (2) URL fields.
Published 2010-09-29 · Modified
5.0EPSS 0.012
CVE-2010-4892
Cross-site scripting (XSS) vulnerability in the powermail extension before 1.5.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published 2011-10-07 · Modified
4.3EPSS 0.010
CVE-2010-3605
Cross-site scripting (XSS) vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published 2010-09-24 · Modified
4.3EPSS 0.010
CVE-2012-5889
Cross-site scripting (XSS) vulnerability in the powermail extension before 1.6.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published 2012-11-17 · Modified
4.3EPSS 0.009