CVE-2014-3948

概要

参考情報

• secunia.com/advisories/58909
• typo3.org/extensions/repository/view/powermail
• typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-007 · Vendor Advisory
• openwall.com/lists/oss-security/2014/06/03/3

powermail のその他の脆弱性

• CVE-2014-6288高 7.5The powermail extension 2.x before 2.0.11 for TYPO3 allows remote attackers to bypass the CAPTCHA protection mechanism via unspecified vecto…
• CVE-2014-3947高 7.5Unrestricted file upload vulnerability in the powermail extension before 1.6.11 and 2.x before 2.0.14 for TYPO3 allows remote attackers to e…
• CVE-2012-5889中 4.3Cross-site scripting (XSS) vulnerability in the powermail extension before 1.6.5 for TYPO3 allows remote attackers to inject arbitrary web s…
• CVE-2010-4892中 4.3Cross-site scripting (XSS) vulnerability in the powermail extension before 1.5.5 for TYPO3 allows remote attackers to inject arbitrary web s…
• CVE-2010-3687中 5.0Unspecified vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to bypass validation have an unspec…