Approved changes feed: RSS · Atom

cpe:2.3:a:alex_kellner:powermail:1.5.2:*:*:*:*:*:*:*

part: a version: 1.5.2 update: *

VendorAlex Kellner (02af5daf-7303-5d7b-bd6f-cfecbeb4b2a2)
ProductPowermail (0cc26ee9-5199-583c-bc3e-4ac43f8e3929)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/einpraegsam/powermail purl2cpe 2026-06-01 10:13:47.528765

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-4892 vulnerable 2026-06-08 04:56:31.375360 Details available
Cross-site scripting (XSS) vulnerability in the powermail extension before 1.5.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2011-10-07T10:00:00.000Z
Updated: 2024-09-16T19:56:19.783Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3687 vulnerable 2026-06-08 04:55:16.311173 Details available
Unspecified vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to bypass validation have an unspecified impact by "[injecting] arbitrary values into validated fields," as demonstrated using the (1) Email and (2) URL fields.
Published: 2010-09-29T16:00:00.000Z
Updated: 2024-09-17T04:09:31.396Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.