CVE-2010-3687: Undefined Security Weakness

Unspecified vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to bypass validation have an unspecified impact by "injecting arbitrary values into validated fields," as demonstrated using the 1 Email and 2 URL fields...

PT-2010-5001

Name of the Vulnerable Software and Affected Versions TYPO3 powermail extension versions 1.5.3 and earlier Description The issue allows remote attackers to bypass validation and have an unspecified impact by injecting arbitrary values into validated fields, such as the Email and URL fields...

CVE-2010-3604

SQL injection vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-3605

Cross-site scripting XSS vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Sql injection

SQL injection vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-3605

CVE-2010-3605 affects the TYPO3 powermail extension, version 1.5.3 and earlier. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected Red Hat and CVE listings corroborate TYPO3 powermail as...

CVE-2010-3605

Cross-site scripting XSS vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-3604

SQL injection vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-3604

The CVE-2010-3604 entry concerns the TYPO3 powermail extension (versions 1.5.3 and earlier). The underlying issue is an SQL injection in powermail, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. The exposed component is the powermail extension for TYPO3; impa...

CVE-2010-3604: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-3605: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-1532

Directory traversal vulnerability in the givesight PowerMail Pro compowermail component 1.5.3 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

Directory traversal

Directory traversal vulnerability in the givesight PowerMail Pro compowermail component 1.5.3 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

CVE-2010-1532

Affected software: Joomla! component PowerMail Pro (com_powermail) 1.5.3. Vulnerability: Local File Inclusion via directory traversal, using a trailing .. in the controller parameter to index.php. Impact: allows reading arbitrary files and may have unspecified additional impacts. Root cause: impr...

CVE-2010-1532

Directory traversal vulnerability in the givesight PowerMail Pro compowermail component 1.5.3 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

CVE-2010-1532: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the givesight PowerMail Pro compowermail component 1.5.3 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

Joomla PowerMail Pro 1.5.3 Local File Inclusion

=============================================================================================================== o Joomla Component PowerMail Pro Local File Inclusion Vulnerability Software : compowermail version 1.5.3 Vendor : http://www.givesight.org Author : AntiSecurity Vrs-hCk NoGe OoNBoY Pam...

Joomla Component PowerMail Pro com_powermail Local File Inclusion Vuln

Exploit for php platform in category web applications =============================================================================== Joomla Component PowerMail Pro compowermail Local File Inclusion Vulnerability ===============================================================================...

Joomla! Component PowerMail Pro 1.5.3 - Local File Inclusion

Joomla! Component PowerMail Pro 1.5.3 - Local File Inclusion =============================================================================================================== o Joomla Component PowerMail Pro Local File Inclusion Vulnerability Software : compowermail version 1.5.3 Vendor :...