Skip to content
OpenAdvisories

Package · Packagist

in2code/powermail

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.0
    CVE-2025-7899

    Insecure Direct Object Reference in extension "powermail" (powermail)

    The powermail extension for TYPO3 allows Insecure Direct Object Reference resulting in download of arbitrary files from the webserver. This issue affects powermail version 12.0.0 up to 12.5.2 and version 13.0.0

    TYPO3 Extension "powermail" in2code/powermail Packagist
  • Medium —
    CVE-2014-6288

    TYPO3 powermail extension allows remote attackers to bypass CAPTCHA protection mechanism

    The powermail extension 2.x before 2.0.11 for TYPO3 allows remote attackers to bypass the CAPTCHA protection mechanism via unspecified vectors.

    in2code/powermail Packagist