CVE-2010-3604

The CVE-2010-3604 entry concerns the TYPO3 powermail extension (versions 1.5.3 and earlier). The underlying issue is an SQL injection in powermail, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. The exposed component is the powermail extension for TYPO3; impa...