CVE-2014-3947
03.10.2014, 14:55
Unrestricted file upload vulnerability in the powermail extension before 1.6.11 and 2.x before 2.0.14 for TYPO3 allows remote attackers to execute arbitrary code by uploading a file with a crafted extension, then accessing it via unspecified vectors.
| Vendor | Product | Version |
|---|---|---|
| alex_kellner | powermail | 𝑥 ≤ 1.6.10 |
| alex_kellner | powermail | 2.0.0 |
| alex_kellner | powermail | 2.0.1 |
| alex_kellner | powermail | 2.0.2 |
| alex_kellner | powermail | 2.0.3 |
| alex_kellner | powermail | 2.0.4 |
| alex_kellner | powermail | 2.0.5 |
| alex_kellner | powermail | 2.0.6 |
| alex_kellner | powermail | 2.0.7 |
| alex_kellner | powermail | 2.0.8 |
| alex_kellner | powermail | 2.0.9 |
| alex_kellner | powermail | 2.0.10 |
𝑥
= Vulnerable software versions
Ubuntu Releases