Approved changes feed: RSS · Atom

cpe:2.3:a:ivan_kartolo:direct_mail:2.1.4:*:*:*:*:*:*:*

part: a version: 2.1.4 update: *

VendorIvan Kartolo (be811347-f5ea-5b53-b8a1-8c938b8fcebd)
ProductDirect Mail (d798558a-5188-57ac-ac9b-35add366d696)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/kartolo/direct_mail purl2cpe 2026-06-01 10:12:26.414938

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-4159 vulnerable 2026-06-08 04:51:47.456928 Details available
Cross-site scripting (XSS) vulnerability in the newsletter configuration feature in the backend module in the Direct Mail (direct_mail) extension 2.6.4 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Published: 2009-12-02T17:00:00.000Z
Updated: 2024-09-17T00:46:50.055Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.