Unrestricted file upload vulnerability in the powermail extension before 1.6.11 and 2.x before 2.0.14 for TYPO3 allows remote attackers to execute arbitrary code by uploading a file with a crafted extension, then accessing it via unspecified vectors.
2014-10-03T14:55:08.757
2025-04-12T10:46:40.837
Deferred
CVSSv2: 7.5 (HIGH)
AV:N/AC:L/Au:N/C:P/I:P/A:P
10.0
6.4
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | alex_kellner | powermail | ≤ 1.6.10 | Yes |
Application | alex_kellner | powermail | 2.0.0 | Yes |
Application | alex_kellner | powermail | 2.0.1 | Yes |
Application | alex_kellner | powermail | 2.0.2 | Yes |
Application | alex_kellner | powermail | 2.0.3 | Yes |
Application | alex_kellner | powermail | 2.0.4 | Yes |
Application | alex_kellner | powermail | 2.0.5 | Yes |
Application | alex_kellner | powermail | 2.0.6 | Yes |
Application | alex_kellner | powermail | 2.0.7 | Yes |
Application | alex_kellner | powermail | 2.0.8 | Yes |
Application | alex_kellner | powermail | 2.0.9 | Yes |
Application | alex_kellner | powermail | 2.0.10 | Yes |