CVE-2010-3687

Unspecified vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to bypass validation have an unspecified impact by "[injecting] arbitrary values into validated fields," as demonstrated using the (1) Email and (2) URL fields.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2010-09-29

Last modified

2024-09-17

Affected products

• Powermail (Alex Kellner)

References

• http://secunia.com/advisories/41530
• http://typo3.org/extensions/repository/view/powermail/1.5.4
• http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-019