CVE-2010-0329

Published Jan 15, 2010 CVSS 2.0 · 7.5 High EPSS 1.1% KEV · Not listed
Description
SQL injection vulnerability in the powermail extension 1.5.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to the "SQL selection field" and "typoscript."

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2010-0360 TYPO3 powermail Extension Vulnerable to SQL Injection via Unspecified Vectors
Github GHSA Github GHSA GHSA-mgw4-gv3f-g57j TYPO3 powermail Extension Vulnerable to SQL Injection via Unspecified Vectors
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Sep 16, 2024, 10:03 PM
Reserved
Jan 15, 2010, 12:00 AM
Status
Modified
Published
Jan 15, 2010, 7:30 PM
Modified
Jun 16, 2026, 11:15 PM