TYPO3 powermail extension allows remote attackers to bypass CAPTCHA protection mechanism

Description

References

• nvd.nist.gov/vuln/detail/CVE-2014-6288 · ADVISORY
• in2code-de/powermail · PACKAGE
• typo3.org/security/advisory/typo3-ext-sa-2014-006 · WEB
• typo3.org/extensions/repository/view/powermail · WEB
• typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-006 · Vendor Advisory

More vulnerabilities in in2code/powermail

• CVE-2025-7899MEDIUM 6.0The powermail extension for TYPO3 allows Insecure Direct Object Reference resulting in download of arbitrary files from the webserver. This …
• CVE-2024-47047HIGH 7.5An issue was discovered in the powermail extension through 12.4.0 for TYPO3. It fails to validate the mail parameter of the createAction, re…
• CVE-2024-45233CRITICAL 9.8An issue was discovered in powermail extension through 12.3.5 for TYPO3. Several actions in the OutputController can directly be called, due…
• CVE-2024-45232MEDIUM 5.3An issue was discovered in powermail extension through 12.3.5 for TYPO3. It fails to validate the mail parameter of the confirmationAction, …
• CVE-2014-3947HIGH 7.5Unrestricted file upload vulnerability in the powermail extension before 1.6.11 and 2.x before 2.0.14 for TYPO3 allows remote attackers to e…