Approved changes feed: RSS · Atom

cpe:2.3:a:alex_kellner:powermail:1.1.5:*:*:*:*:*:*:*

part: a version: 1.1.5 update: *

VendorAlex Kellner (02af5daf-7303-5d7b-bd6f-cfecbeb4b2a2)
ProductPowermail (0cc26ee9-5199-583c-bc3e-4ac43f8e3929)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/einpraegsam/powermail purl2cpe 2026-06-01 10:13:47.514947

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-5889 vulnerable 2026-06-08 05:02:58.608992 Details available
Cross-site scripting (XSS) vulnerability in the powermail extension before 1.6.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2012-11-17T21:00:00.000Z
Updated: 2024-08-06T21:21:27.834Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4892 vulnerable 2026-06-08 04:56:31.348549 Details available
Cross-site scripting (XSS) vulnerability in the powermail extension before 1.5.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2011-10-07T10:00:00.000Z
Updated: 2024-09-16T19:56:19.783Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3687 vulnerable 2026-06-08 04:55:16.282300 Details available
Unspecified vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to bypass validation have an unspecified impact by "[injecting] arbitrary values into validated fields," as demonstrated using the (1) Email and (2) URL fields.
Published: 2010-09-29T16:00:00.000Z
Updated: 2024-09-17T04:09:31.396Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3605 vulnerable 2026-06-08 04:55:15.759725 Details available
Cross-site scripting (XSS) vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2010-09-24T19:44:00.000Z
Updated: 2024-09-17T00:17:31.547Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3604 vulnerable 2026-06-08 04:55:15.732529 Details available
SQL injection vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Published: 2010-09-24T19:44:00.000Z
Updated: 2024-09-16T22:36:42.361Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0329 vulnerable 2026-06-08 04:52:01.896402 Details available
SQL injection vulnerability in the powermail extension 1.5.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to the "SQL selection field" and "typoscript."
Published: 2010-01-15T19:00:00.000Z
Updated: 2024-09-16T22:03:28.177Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.