Approved changes feed: RSS · Atom

cpe:2.3:a:alex_kellner:powermail:1.5.0:*:*:*:*:*:*:*

part: a version: 1.5.0 update: *

VendorAlex Kellner (02af5daf-7303-5d7b-bd6f-cfecbeb4b2a2)
ProductPowermail (0cc26ee9-5199-583c-bc3e-4ac43f8e3929)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/einpraegsam/powermail purl2cpe 2026-06-01 10:13:47.515027

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-5889 vulnerable 2026-06-08 05:02:58.631430 Details available
Cross-site scripting (XSS) vulnerability in the powermail extension before 1.6.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2012-11-17T21:00:00.000Z
Updated: 2024-08-06T21:21:27.834Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4892 vulnerable 2026-06-08 04:56:31.373876 Details available
Cross-site scripting (XSS) vulnerability in the powermail extension before 1.5.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2011-10-07T10:00:00.000Z
Updated: 2024-09-16T19:56:19.783Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3687 vulnerable 2026-06-08 04:55:16.283047 Details available
Unspecified vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to bypass validation have an unspecified impact by "[injecting] arbitrary values into validated fields," as demonstrated using the (1) Email and (2) URL fields.
Published: 2010-09-29T16:00:00.000Z
Updated: 2024-09-17T04:09:31.396Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3605 vulnerable 2026-06-08 04:55:15.760467 Details available
Cross-site scripting (XSS) vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2010-09-24T19:44:00.000Z
Updated: 2024-09-17T00:17:31.547Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3604 vulnerable 2026-06-08 04:55:15.757325 Details available
SQL injection vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Published: 2010-09-24T19:44:00.000Z
Updated: 2024-09-16T22:36:42.361Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0329 vulnerable 2026-06-08 04:52:01.918028 Details available
SQL injection vulnerability in the powermail extension 1.5.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to the "SQL selection field" and "typoscript."
Published: 2010-01-15T19:00:00.000Z
Updated: 2024-09-16T22:03:28.177Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.