CVEvulnerability
CVE-2010-0329
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-01-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in the powermail extension 1.5.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to the "SQL selection field" and "typoscript."
Affected configurations
• alex kellner powermail (<= 1.5.1)
• alex kellner powermail 1.0.1
• alex kellner powermail 1.0.2
• alex kellner powermail 1.0.3
• alex kellner powermail 1.0.4
• alex kellner powermail 1.0.5
• alex kellner powermail 1.0.6
• alex kellner powermail 1.0.7
• alex kellner powermail 1.0.8
• alex kellner powermail 1.0.9
• alex kellner powermail 1.0.10
• alex kellner powermail 1.0.11
• alex kellner powermail 1.0.12
• alex kellner powermail 1.1.0
• alex kellner powermail 1.1.1
• alex kellner powermail 1.1.2
• alex kellner powermail 1.1.3
• alex kellner powermail 1.1.4
• alex kellner powermail 1.1.5
• alex kellner powermail 1.1.6
• alex kellner powermail 1.1.7
• alex kellner powermail 1.1.8
• alex kellner powermail 1.1.9
• alex kellner powermail 1.1.10
• alex kellner powermail 1.2.0
• alex kellner powermail 1.2.1
• alex kellner powermail 1.2.2
• alex kellner powermail 1.2.3
• alex kellner powermail 1.2.4
• alex kellner powermail 1.3.1
• alex kellner powermail 1.3.2
• alex kellner powermail 1.3.3
• alex kellner powermail 1.3.4
• alex kellner powermail 1.3.5
• alex kellner powermail 1.3.6
• alex kellner powermail 1.3.7
• alex kellner powermail 1.3.8
• alex kellner powermail 1.3.9
• alex kellner powermail 1.3.10
• alex kellner powermail 1.3.11
• alex kellner powermail 1.3.12
• alex kellner powermail 1.3.13
• alex kellner powermail 1.3.14
• alex kellner powermail 1.3.15
• alex kellner powermail 1.3.16
• alex kellner powermail 1.4.1
• alex kellner powermail 1.4.2
• alex kellner powermail 1.4.3
• alex kellner powermail 1.4.4
• alex kellner powermail 1.4.5
• alex kellner powermail 1.4.6
• alex kellner powermail 1.4.7
• alex kellner powermail 1.4.8
• alex kellner powermail 1.4.9
• alex kellner powermail 1.4.10
• alex kellner powermail 1.4.11
• alex kellner powermail 1.4.12
• alex kellner powermail 1.4.13
• alex kellner powermail 1.4.14
• alex kellner powermail 1.4.15
… and 4 more
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/38167 Vendor Advisory
- http://typo3.org/extensions/repository/view/powermail/1.5.2/ typo3.org
- http://typo3.org/extensions/repository/view/powermail/1.5.2/info/changelog.txt/ typo3.org
- http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ Vendor Advisory
- http://secunia.com/advisories/38167 Vendor Advisory
- http://typo3.org/extensions/repository/view/powermail/1.5.2/ typo3.org
- http://typo3.org/extensions/repository/view/powermail/1.5.2/info/changelog.txt/ typo3.org
- http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/ Vendor Advisory