in2code/powermail

Composer · Package

10 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Powermail extension for TYPO3 allows Insecure Direct Object ReferenceCVE-2025-7899 · GHSA-X769-3CWV-F8HC	in2code/powermail	Composer	Medium	Fix reported	2025-07-22
TYPO3 powermail extension allows remote attackers to bypass CAPTCHA protection mechanismCVE-2014-6288 · GHSA-2JQ7-PGQQ-GQQJ	in2code/powermail	Composer	Medium	Fix reported	2025-04-14
TYPO3 powermail extension has unrestricted file upload vulnerabilityCVE-2014-3947 · GHSA-M278-C6GG-4JRR	in2code/powermail	Composer	High	Fix reported	2025-04-14
powermail extension for TYPO3 has Cross-site Scripting vulnerabilityCVE-2012-5889 · GHSA-8CG3-JFJX-3PP2	in2code/powermail	Composer	Low	Fix reported	2025-04-12
powermail extension for TYPO3 vulnerable to SQL InjectionCVE-2010-3604 · GHSA-RP53-FW29-RXG3	in2code/powermail	Composer	High	Fix reported	2025-04-12
TYPO3 powermail Extension Vulnerable to SQL Injection via Unspecified VectorsCVE-2010-0329 · GHSA-MGW4-GV3F-G57J	in2code/powermail	Composer	High	Fix reported	2025-04-10
powermail TYPO3 extension has Insecure Direct Object ReferenceCVE-2024-47047 · GHSA-Q25C-R482-77P9Version ranges need review.	in2code/powermail	Composer	Medium	Fix reported	2025-03-19
Powermail TYPO3 extension Broken Access Control in the OutputControllerCVE-2024-45233 · GHSA-9JQR-5X45-PGW8	in2code/powermail	Composer	Medium	Fix reported	2024-08-30
"powermail" (powermail) Insecure Direct Object Reference (IDOR)CVE-2024-45232 · GHSA-P652-XCGX-F85MVersion ranges need review.	in2code/powermail	Composer	Medium	Fix reported	2024-08-30
TYPO3-EXT-SA-2026-022: Server-Side Template Injection in extension "powermail" (powermail)CVE-2026-77136 · PKSA-DHFP-J236-NF9H	in2code/powermail	Composer	Unknown	No fix reported	Not recorded