TYPO3 Powermail Extension 'HTML Export Wizard' HTML Injection Vulnerability

Bugtraq ID:	67621
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 22 2014 12:00AM
Updated:	May 22 2014 12:00AM
Credit:	Florian Grunow
Vulnerable:	Typo3 Powermail 1.6.5 Typo3 Powermail 1.6.4 Typo3 Powermail 1.6.3 Typo3 Powermail 1.6.2 Typo3 Powermail 1.6.1 Typo3 Powermail 1.6
Not Vulnerable:

TYPO3 Powermail Extension 'HTML Export Wizard' HTML Injection Vulnerability

The TYPO3 Powermail extension is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may exploit the HTML-injection issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials, control how the site is displayed, and launch other attacks.

Versions prior to Powermail 1.6.11 are vulnerable.

TYPO3 Powermail Extension 'HTML Export Wizard' HTML Injection Vulnerability

Attackers can use a browser to exploit this issue.

TYPO3 Powermail Extension 'HTML Export Wizard' HTML Injection Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

TYPO3 Powermail Extension 'HTML Export Wizard' HTML Injection Vulnerability

References:

• TYPO3 Homepage (TYPO3)