TYPO3 powermail extension has unrestricted file upload vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2014-3947 · ADVISORY
• in2code-de/powermail · PACKAGE
• typo3.org/security/advisory/typo3-ext-sa-2014-007 · WEB
• typo3.org/extensions/repository/view/powermail · WEB
• typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-007

in2code/powermail のその他の脆弱性

• CVE-2025-7899中 6.0The powermail extension for TYPO3 allows Insecure Direct Object Reference resulting in download of arbitrary files from the webserver. This …
• CVE-2024-47047高 7.5An issue was discovered in the powermail extension through 12.4.0 for TYPO3. It fails to validate the mail parameter of the createAction, re…
• CVE-2024-45233緊急 9.8An issue was discovered in powermail extension through 12.3.5 for TYPO3. Several actions in the OutputController can directly be called, due…
• CVE-2024-45232中 5.3An issue was discovered in powermail extension through 12.3.5 for TYPO3. It fails to validate the mail parameter of the confirmationAction, …
• CVE-2014-6288高 7.5The powermail extension 2.x before 2.0.11 for TYPO3 allows remote attackers to bypass the CAPTCHA protection mechanism via unspecified vecto…