CVE-2010-0329
Summary
| CVE | CVE-2010-0329 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2010-01-15 19:30:00 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | SQL injection vulnerability in the powermail extension 1.5.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to the "SQL selection field" and "typoscript." |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:N/AC:L/Au:N/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Alex Kellner | Powermail | 1.0.1 | All | All | All |
| Application | Alex Kellner | Powermail | 1.0.10 | All | All | All |
| Application | Alex Kellner | Powermail | 1.0.11 | All | All | All |
| Application | Alex Kellner | Powermail | 1.0.12 | All | All | All |
| Application | Alex Kellner | Powermail | 1.0.2 | All | All | All |
| Application | Alex Kellner | Powermail | 1.0.3 | All | All | All |
| Application | Alex Kellner | Powermail | 1.0.4 | All | All | All |
| Application | Alex Kellner | Powermail | 1.0.5 | All | All | All |
| Application | Alex Kellner | Powermail | 1.0.6 | All | All | All |
| Application | Alex Kellner | Powermail | 1.0.7 | All | All | All |
| Application | Alex Kellner | Powermail | 1.0.8 | All | All | All |
| Application | Alex Kellner | Powermail | 1.0.9 | All | All | All |
| Application | Alex Kellner | Powermail | 1.1.0 | All | All | All |
| Application | Alex Kellner | Powermail | 1.1.1 | All | All | All |
| Application | Alex Kellner | Powermail | 1.1.10 | All | All | All |
| Application | Alex Kellner | Powermail | 1.1.2 | All | All | All |
| Application | Alex Kellner | Powermail | 1.1.3 | All | All | All |
| Application | Alex Kellner | Powermail | 1.1.4 | All | All | All |
| Application | Alex Kellner | Powermail | 1.1.5 | All | All | All |
| Application | Alex Kellner | Powermail | 1.1.6 | All | All | All |
| Application | Alex Kellner | Powermail | 1.1.7 | All | All | All |
| Application | Alex Kellner | Powermail | 1.1.8 | All | All | All |
| Application | Alex Kellner | Powermail | 1.1.9 | All | All | All |
| Application | Alex Kellner | Powermail | 1.2.0 | All | All | All |
| Application | Alex Kellner | Powermail | 1.2.1 | All | All | All |
| Application | Alex Kellner | Powermail | 1.2.2 | All | All | All |
| Application | Alex Kellner | Powermail | 1.2.3 | All | All | All |
| Application | Alex Kellner | Powermail | 1.2.4 | All | All | All |
| Application | Alex Kellner | Powermail | 1.3.1 | All | All | All |
| Application | Alex Kellner | Powermail | 1.3.10 | All | All | All |
| Application | Alex Kellner | Powermail | 1.3.11 | All | All | All |
| Application | Alex Kellner | Powermail | 1.3.12 | All | All | All |
| Application | Alex Kellner | Powermail | 1.3.13 | All | All | All |
| Application | Alex Kellner | Powermail | 1.3.14 | All | All | All |
| Application | Alex Kellner | Powermail | 1.3.15 | All | All | All |
| Application | Alex Kellner | Powermail | 1.3.16 | All | All | All |
| Application | Alex Kellner | Powermail | 1.3.2 | All | All | All |
| Application | Alex Kellner | Powermail | 1.3.3 | All | All | All |
| Application | Alex Kellner | Powermail | 1.3.4 | All | All | All |
| Application | Alex Kellner | Powermail | 1.3.5 | All | All | All |
| Application | Alex Kellner | Powermail | 1.3.6 | All | All | All |
| Application | Alex Kellner | Powermail | 1.3.7 | All | All | All |
| Application | Alex Kellner | Powermail | 1.3.8 | All | All | All |
| Application | Alex Kellner | Powermail | 1.3.9 | All | All | All |
| Application | Alex Kellner | Powermail | 1.4.1 | All | All | All |
| Application | Alex Kellner | Powermail | 1.4.10 | All | All | All |
| Application | Alex Kellner | Powermail | 1.4.11 | All | All | All |
| Application | Alex Kellner | Powermail | 1.4.12 | All | All | All |
| Application | Alex Kellner | Powermail | 1.4.13 | All | All | All |
| Application | Alex Kellner | Powermail | 1.4.14 | All | All | All |
| Application | Alex Kellner | Powermail | 1.4.15 | All | All | All |
| Application | Alex Kellner | Powermail | 1.4.16 | All | All | All |
| Application | Alex Kellner | Powermail | 1.4.17 | All | All | All |
| Application | Alex Kellner | Powermail | 1.4.18 | All | All | All |
| Application | Alex Kellner | Powermail | 1.4.2 | All | All | All |
| Application | Alex Kellner | Powermail | 1.4.3 | All | All | All |
| Application | Alex Kellner | Powermail | 1.4.4 | All | All | All |
| Application | Alex Kellner | Powermail | 1.4.5 | All | All | All |
| Application | Alex Kellner | Powermail | 1.4.6 | All | All | All |
| Application | Alex Kellner | Powermail | 1.4.7 | All | All | All |
| Application | Alex Kellner | Powermail | 1.4.8 | All | All | All |
| Application | Alex Kellner | Powermail | 1.4.9 | All | All | All |
| Application | Alex Kellner | Powermail | 1.5.0 | All | All | All |
| Application | Alex Kellner | Powermail | All | All | All | All |
| Application | Typo3 | Typo3 | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| powermail (powermail) | af854a3a-2127-422b-91ae-364da2661108 | typo3.org | |
| powermail (powermail) | af854a3a-2127-422b-91ae-364da2661108 | typo3.org | |
| TYPO3 powermail Extension SQL Injection Vulnerability - Advisories - Community | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| TYPO3 - the Enterprise Open Source CMS: TYPO3 Security Bulletin TYPO3-SA-2009-021: Multiple vulnerabilities in third party extensions | af854a3a-2127-422b-91ae-364da2661108 | typo3.org | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.