Approved changes feed: RSS · Atom

cpe:2.3:a:alex_kellner:powermail:1.4.14:*:*:*:*:*:*:*

part: a version: 1.4.14 update: *

VendorAlex Kellner (02af5daf-7303-5d7b-bd6f-cfecbeb4b2a2)
ProductPowermail (0cc26ee9-5199-583c-bc3e-4ac43f8e3929)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/einpraegsam/powermail purl2cpe 2026-06-01 10:13:47.515003

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-5889 vulnerable 2026-06-08 05:02:58.628973 Details available
Cross-site scripting (XSS) vulnerability in the powermail extension before 1.6.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2012-11-17T21:00:00.000Z
Updated: 2024-08-06T21:21:27.834Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4892 vulnerable 2026-06-08 04:56:31.370872 Details available
Cross-site scripting (XSS) vulnerability in the powermail extension before 1.5.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2011-10-07T10:00:00.000Z
Updated: 2024-09-16T19:56:19.783Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3687 vulnerable 2026-06-08 04:55:16.282966 Details available
Unspecified vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to bypass validation have an unspecified impact by "[injecting] arbitrary values into validated fields," as demonstrated using the (1) Email and (2) URL fields.
Published: 2010-09-29T16:00:00.000Z
Updated: 2024-09-17T04:09:31.396Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3605 vulnerable 2026-06-08 04:55:15.760387 Details available
Cross-site scripting (XSS) vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2010-09-24T19:44:00.000Z
Updated: 2024-09-17T00:17:31.547Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3604 vulnerable 2026-06-08 04:55:15.754354 Details available
SQL injection vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Published: 2010-09-24T19:44:00.000Z
Updated: 2024-09-16T22:36:42.361Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0329 vulnerable 2026-06-08 04:52:01.915514 Details available
SQL injection vulnerability in the powermail extension 1.5.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to the "SQL selection field" and "typoscript."
Published: 2010-01-15T19:00:00.000Z
Updated: 2024-09-16T22:03:28.177Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.