Description
SQL injection vulnerability in the powermail extension 1.5.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to the "SQL selection field" and "typoscript."
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2010-0360 | TYPO3 powermail Extension Vulnerable to SQL Injection via Unspecified Vectors |
Github GHSA |
GHSA-mgw4-gv3f-g57j | TYPO3 powermail Extension Vulnerable to SQL Injection via Unspecified Vectors |
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-09-16T22:03:28.177Z
Reserved: 2010-01-15T00:00:00.000Z
Link: CVE-2010-0329
No data.
Status : Modified
Published: 2010-01-15T19:30:00.707
Modified: 2026-04-23T00:35:47.467
Link: CVE-2010-0329
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD
Github GHSA