CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-3947

Unrestricted file upload vulnerability in the powermail extension before 1.6.11 and 2.x before 2.0.14 for TYPO3 allows remote attackers to execute arbitrary code by uploading a file with a crafted extension, then accessing it via unspecified vectors.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.017

EPSS Ranking 81.6%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2014-3947

Alex Kellner » Powermail » Version: Any

cpe:2.3:a:alex_kellner:powermail:*
Alex Kellner » Powermail » Version: 2.0.0

cpe:2.3:a:alex_kellner:powermail:2.0.0
Alex Kellner » Powermail » Version: 2.0.1

cpe:2.3:a:alex_kellner:powermail:2.0.1
Alex Kellner » Powermail » Version: 2.0.10

cpe:2.3:a:alex_kellner:powermail:2.0.10
Alex Kellner » Powermail » Version: 2.0.2

cpe:2.3:a:alex_kellner:powermail:2.0.2
Alex Kellner » Powermail » Version: 2.0.3

cpe:2.3:a:alex_kellner:powermail:2.0.3
Alex Kellner » Powermail » Version: 2.0.4

cpe:2.3:a:alex_kellner:powermail:2.0.4
Alex Kellner » Powermail » Version: 2.0.5

cpe:2.3:a:alex_kellner:powermail:2.0.5
Alex Kellner » Powermail » Version: 2.0.6

cpe:2.3:a:alex_kellner:powermail:2.0.6
Alex Kellner » Powermail » Version: 2.0.7

cpe:2.3:a:alex_kellner:powermail:2.0.7
Alex Kellner » Powermail » Version: 2.0.8

cpe:2.3:a:alex_kellner:powermail:2.0.8
Alex Kellner » Powermail » Version: 2.0.9

cpe:2.3:a:alex_kellner:powermail:2.0.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-3947

Products

Pricing

Contact Us