Powermail
Vendor:
First CVE: Jan 15, 2010 · Active for 16 years
9
Total CVEs
More Total CVEs than 88% of tracked products
2.3
Avg CVEs / Year
Higher CVE frequency than 76% of tracked products
5.8
Avg CVSS
Higher Avg CVSS than 21% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Powermail over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jan 15, 2010
16 years ago
Most Recent CVE
Oct 3, 2014
4,315 days ago
CVE Severity & Scoring
Powermail9 CVEs
56%
44%
All CVEs352,785 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown9 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown9 (100.0%)
User Interaction
None0 (0.0%)
Unknown9 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown9 (100.0%)
Top CVEs
Signals from CVEs in this product scope (9 CVEs).
9 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2014-6288HIGH The powermail extension 2.x before 2.0.11 for TYPO3 allows remote attackers to bypass the CAPTCHA protection mechanism via unspecified vectors. | Oct 3, 2014 | 7.5 | 24 | NO | NO |
CVE-2010-3604HIGH SQL injection vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. | Sep 24, 2010 | 7.5 | 21 | NO | NO |
CVE-2014-3947HIGH Unrestricted file upload vulnerability in the powermail extension before 1.6.11 and 2.x before 2.0.14 for TYPO3 allows remote attackers to execute arbitrary code by uploading a fil | Oct 3, 2014 | 7.5 | 20 | NO | NO |
CVE-2010-0329HIGH SQL injection vulnerability in the powermail extension 1.5.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to the | Jan 15, 2010 | 7.5 | 19 | NO | NO |
CVE-2010-3687MEDIUM Unspecified vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to bypass validation have an unspecified impact by "[injecting] arbitrary v | Sep 29, 2010 | 5.0 | 17 | NO | NO |
CVE-2012-5889MEDIUM Cross-site scripting (XSS) vulnerability in the powermail extension before 1.6.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | Nov 17, 2012 | 4.3 | 16 | NO | NO |
CVE-2010-4892MEDIUM Cross-site scripting (XSS) vulnerability in the powermail extension before 1.5.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | Oct 7, 2011 | 4.3 | 16 | NO | NO |
CVE-2010-3605MEDIUM Cross-site scripting (XSS) vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vecto | Sep 24, 2010 | 4.3 | 16 | NO | NO |
CVE-2014-3948MEDIUM Cross-site scripting (XSS) vulnerability in the HTML export wizard in the backend module in the powermail extension before 1.6.11 for TYPO3 allows remote attackers to inject arbitr | Jun 4, 2014 | 4.3 | 14 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (9 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (9 CVEs).
Media Mentions
Signals from CVEs in this product scope (9 CVEs).
Top CNAs Publishing CVEs For Powermail
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2.0.9 | 2 | 7.5 | 2.1% | 0 | 0 |
| 2.0.8 | 2 | 7.5 | 2.1% | 0 | 0 |
| 2.0.7 | 2 | 7.5 | 2.1% | 0 | 0 |
| 2.0.6 | 2 | 7.5 | 2.1% | 0 | 0 |
| 2.0.5 | 2 | 7.5 | 2.1% | 0 | 0 |
| 2.0.4 | 2 | 7.5 | 2.1% | 0 | 0 |
| 2.0.3 | 2 | 7.5 | 2.1% | 0 | 0 |
| 2.0.2 | 2 | 7.5 | 2.1% | 0 | 0 |
| 2.0.10 | 2 | 7.5 | 2.1% | 0 | 0 |
| 2.0.1 | 2 | 7.5 | 2.1% | 0 | 0 |
| 2.0.0 | 2 | 7.5 | 2.1% | 0 | 0 |
| 1.6.9 | 1 | 4.3 | 1.2% | 0 | 0 |
| 1.6.8 | 1 | 4.3 | 1.2% | 0 | 0 |
| 1.6.7 | 1 | 4.3 | 1.2% | 0 | 0 |
| 1.6.6 | 1 | 4.3 | 1.2% | 0 | 0 |
| 1.6.5 | 1 | 4.3 | 1.2% | 0 | 0 |
| 1.6.3 | 1 | 4.3 | 1.2% | 0 | 0 |
| 1.6.2 | 1 | 4.3 | 1.2% | 0 | 0 |
| 1.6.1 | 1 | 4.3 | 1.2% | 0 | 0 |
| 1.6.0 | 1 | 4.3 | 1.2% | 0 | 0 |