Approved changes feed: RSS · Atom

cpe:2.3:a:alex_kellner:powermail:1.4.4:*:*:*:*:*:*:*

part: a version: 1.4.4 update: *

VendorAlex Kellner (02af5daf-7303-5d7b-bd6f-cfecbeb4b2a2)
ProductPowermail (0cc26ee9-5199-583c-bc3e-4ac43f8e3929)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/einpraegsam/powermail purl2cpe 2026-06-01 10:13:47.515016

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-5889 vulnerable 2026-06-08 05:02:58.623905 Details available
Cross-site scripting (XSS) vulnerability in the powermail extension before 1.6.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2012-11-17T21:00:00.000Z
Updated: 2024-08-06T21:21:27.834Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4892 vulnerable 2026-06-08 04:56:31.365652 Details available
Cross-site scripting (XSS) vulnerability in the powermail extension before 1.5.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2011-10-07T10:00:00.000Z
Updated: 2024-09-16T19:56:19.783Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3687 vulnerable 2026-06-08 04:55:16.282800 Details available
Unspecified vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to bypass validation have an unspecified impact by "[injecting] arbitrary values into validated fields," as demonstrated using the (1) Email and (2) URL fields.
Published: 2010-09-29T16:00:00.000Z
Updated: 2024-09-17T04:09:31.396Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3605 vulnerable 2026-06-08 04:55:15.760225 Details available
Cross-site scripting (XSS) vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2010-09-24T19:44:00.000Z
Updated: 2024-09-17T00:17:31.547Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3604 vulnerable 2026-06-08 04:55:15.749109 Details available
SQL injection vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Published: 2010-09-24T19:44:00.000Z
Updated: 2024-09-16T22:36:42.361Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0329 vulnerable 2026-06-08 04:52:01.910706 Details available
SQL injection vulnerability in the powermail extension 1.5.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to the "SQL selection field" and "typoscript."
Published: 2010-01-15T19:00:00.000Z
Updated: 2024-09-16T22:03:28.177Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.