CVE-2010-4892: XSS
Published Oct 7, 2011
·Updated
Cross-site scripting (XSS) vulnerability in the powermail extension before 1.5.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
68 affected components
Alex Kellner Powermail<=1.5.4
Alex Kellner Powermail=1.0.1
Alex Kellner Powermail=1.0.2
Alex Kellner Powermail=1.0.3
Alex Kellner Powermail=1.0.4
Alex Kellner Powermail=1.0.5
Alex Kellner Powermail=1.0.6
Alex Kellner Powermail=1.0.7
Alex Kellner Powermail=1.0.8
Alex Kellner Powermail=1.0.9
Alex Kellner Powermail=1.0.10
Alex Kellner Powermail=1.0.11
Alex Kellner Powermail=1.0.12
Alex Kellner Powermail=1.1.0
Alex Kellner Powermail=1.1.1
Alex Kellner Powermail=1.1.2
Alex Kellner Powermail=1.1.3
Alex Kellner Powermail=1.1.4
Alex Kellner Powermail=1.1.5
Alex Kellner Powermail=1.1.6
Alex Kellner Powermail=1.1.7
Alex Kellner Powermail=1.1.8
Alex Kellner Powermail=1.1.9
Alex Kellner Powermail=1.1.10
Alex Kellner Powermail=1.2.0
Alex Kellner Powermail=1.2.1
Alex Kellner Powermail=1.2.2
Alex Kellner Powermail=1.2.3
Alex Kellner Powermail=1.2.4
Alex Kellner Powermail=1.3.1
Alex Kellner Powermail=1.3.2
Alex Kellner Powermail=1.3.3
Alex Kellner Powermail=1.3.4
Alex Kellner Powermail=1.3.5
Alex Kellner Powermail=1.3.6
Alex Kellner Powermail=1.3.7
Alex Kellner Powermail=1.3.8
Alex Kellner Powermail=1.3.9
Alex Kellner Powermail=1.3.10
Alex Kellner Powermail=1.3.11
Alex Kellner Powermail=1.3.12
Alex Kellner Powermail=1.3.13
Alex Kellner Powermail=1.3.14
Alex Kellner Powermail=1.3.15
Alex Kellner Powermail=1.3.16
Alex Kellner Powermail=1.4.1
Alex Kellner Powermail=1.4.2
Alex Kellner Powermail=1.4.3
Alex Kellner Powermail=1.4.4
Alex Kellner Powermail=1.4.5
Alex Kellner Powermail=1.4.6
Alex Kellner Powermail=1.4.7
Alex Kellner Powermail=1.4.8
Alex Kellner Powermail=1.4.9
Alex Kellner Powermail=1.4.10
Alex Kellner Powermail=1.4.11
Alex Kellner Powermail=1.4.12
Alex Kellner Powermail=1.4.13
Alex Kellner Powermail=1.4.14
Alex Kellner Powermail=1.4.15
Alex Kellner Powermail=1.4.16
Alex Kellner Powermail=1.4.17
Alex Kellner Powermail=1.4.18
Alex Kellner Powermail=1.5.0
Alex Kellner Powermail=1.5.1
Alex Kellner Powermail=1.5.2
Alex Kellner Powermail=1.5.3
Typo3 TYPO3
Event History
Oct 7, 2011
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
10:55 AM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-4892?
CVE-2010-4892 is classified as a cross-site scripting (XSS) vulnerability, which can allow remote attackers to inject arbitrary script or HTML code.
2
How do I fix CVE-2010-4892?
To fix CVE-2010-4892, upgrade the powermail extension to version 1.5.5 or later.
3
Which versions are affected by CVE-2010-4892?
CVE-2010-4892 affects powermail extension versions prior to 1.5.5.
4
What is the impact of exploiting CVE-2010-4892?
Exploiting CVE-2010-4892 can lead to the execution of arbitrary scripts, potentially compromising user data and site integrity.
5
Who can be affected by CVE-2010-4892?
Users of TYPO3 with the powermail extension versions below 1.5.5 can be affected by CVE-2010-4892.