TYPO3 Powermail Extension Cross Site Scripting and SQL Injection Vulnerabilities
BID:43388
Info
TYPO3 Powermail Extension Cross Site Scripting and SQL Injection Vulnerabilities
| Bugtraq ID: | 43388 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 22 2010 12:00AM |
| Updated: | Sep 22 2010 12:00AM |
| Credit: | Cedric Tissieres. |
| Vulnerable: |
Typo3 Powermail 1.5.2 Typo3 Powermail 1.5.1 |
| Not Vulnerable: |
Typo3 Powermail 1.5.4 |
Discussion
TYPO3 Powermail Extension Cross Site Scripting and SQL Injection Vulnerabilities
TYPO3 Powermail Extension is prone to unspecified SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Versions prior to TYPO3 Powermail 1.5.4 are vulnerable.
TYPO3 Powermail Extension is prone to unspecified SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Versions prior to TYPO3 Powermail 1.5.4 are vulnerable.
Exploit / POC
TYPO3 Powermail Extension Cross Site Scripting and SQL Injection Vulnerabilities
An attacker can exploit these issues via a browser. To exploit a cross-site scripting issue, the attacker must entice an unsuspecting victim to follow a malicious URI.
An attacker can exploit these issues via a browser. To exploit a cross-site scripting issue, the attacker must entice an unsuspecting victim to follow a malicious URI.
Solution / Fix
TYPO3 Powermail Extension Cross Site Scripting and SQL Injection Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
TYPO3 Powermail Extension Cross Site Scripting and SQL Injection Vulnerabilities
References:
References:
- Synnefoims Homepage (synnefoims)
- TYPO3-SA-2010-019: Multiple vulnerabilities in extension powermail (TYPO3)