alex kellner vulnerabilities

Products

• powermail 9

Latest alex kellner CVEs

Newest publication first

1. CVE-2014-3947 TYPO3 powermail extension has unrestricted file upload vulnerability

   Published 2014-10-03

   High·CVSS 7.5 EPSS 2.3%

   Unrestricted file upload vulnerability in the powermail extension before 1.6.11 and 2.x before 2.0.14 for TYPO3 allows remote attackers to execute arbitrary code by uploading a file with a crafted extension, then accessing it via unspecified vectors.

2. CVE-2014-6288 TYPO3 powermail extension allows remote attackers to bypass CAPTCHA protection mechanism

   Published 2014-10-03

   High·CVSS 7.5 EPSS 1.9%

   The powermail extension 2.x before 2.0.11 for TYPO3 allows remote attackers to bypass the CAPTCHA protection mechanism via unspecified vectors.

3. CVE-2014-3948 Cross-site scripting (XSS) vulnerability in the HTML export wizard in the backend module in the powermail extension before 1.6.11 for TYPO3 allows remote attackers to inject arbitrary web script or HT...

   Published 2014-06-04

   Medium·CVSS 4.3 EPSS 1.2%

   Cross-site scripting (XSS) vulnerability in the HTML export wizard in the backend module in the powermail extension before 1.6.11 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4. CVE-2012-5889 powermail extension for TYPO3 has Cross-site Scripting vulnerability

   Published 2012-11-17

   Medium·CVSS 4.3 EPSS 0.93%

   Cross-site scripting (XSS) vulnerability in the powermail extension before 1.6.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

5. CVE-2010-4892 Cross-site scripting (XSS) vulnerability in the powermail extension before 1.5.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

   Published 2011-10-07

   Medium·CVSS 4.3 EPSS 1.0%

   Cross-site scripting (XSS) vulnerability in the powermail extension before 1.5.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

6. CVE-2010-3687 Unspecified vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to bypass validation have an unspecified impact by "[injecting] arbitrary values into validated...

   Published 2010-09-29

   Medium·CVSS 5.0 EPSS 1.2%

   Unspecified vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to bypass validation have an unspecified impact by "[injecting] arbitrary values into validated fields," as demonstrated using the (1) Email and (2) URL fields.

7. CVE-2010-3605 Cross-site scripting (XSS) vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

   Published 2010-09-24

   Medium·CVSS 4.3 EPSS 1.0%

   Cross-site scripting (XSS) vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

8. CVE-2010-3604 powermail extension for TYPO3 vulnerable to SQL Injection

   Published 2010-09-24

   High·CVSS 7.5 EPSS 1.1%

   SQL injection vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

9. CVE-2010-0329 TYPO3 powermail Extension Vulnerable to SQL Injection via Unspecified Vectors

   Published 2010-01-15

   High·CVSS 7.5 EPSS 1.1%

   SQL injection vulnerability in the powermail extension 1.5.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to the "SQL selection field" and "typoscript."

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.