GHSA-rp53-fw29-rxg3

ghsaUSosv

powermail extension for TYPO3 vulnerable to SQL Injection

view advisory published 2022-05-17Licence: CC-BY-4.0

SQL injection vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2010-3604US	high7.5	1.05% (64th)	—	2010-09-24
SQL injection vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

references

External citations — patches, advisories, analysis.

http://typo3.org/extensions/repository/view/powermail/1.5.4WEB
https://github.com/in2code-de/powermailPACKAGE
https://nvd.nist.gov/vuln/detail/CVE-2010-3604ADVISORY
https://web.archive.org/web/20101112082509/http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-019WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan