CVE-2012-5889: XSS
Published Nov 17, 2012
·Updated
Cross-site scripting (XSS) vulnerability in the powermail extension before 1.6.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
68 affected componentsFixes available
Alex Kellner Powermail<=1.6.4
Alex Kellner Powermail=1.0.1
Alex Kellner Powermail=1.0.2
Alex Kellner Powermail=1.0.3
Alex Kellner Powermail=1.0.4
Alex Kellner Powermail=1.0.5
Alex Kellner Powermail=1.0.6
Alex Kellner Powermail=1.0.7
Alex Kellner Powermail=1.0.8
Alex Kellner Powermail=1.0.9
Alex Kellner Powermail=1.0.10
Alex Kellner Powermail=1.0.11
Alex Kellner Powermail=1.0.12
Alex Kellner Powermail=1.1.0
Alex Kellner Powermail=1.1.1
Alex Kellner Powermail=1.1.2
Alex Kellner Powermail=1.1.3
Alex Kellner Powermail=1.1.4
Alex Kellner Powermail=1.1.5
Alex Kellner Powermail=1.1.6
Alex Kellner Powermail=1.1.7
Alex Kellner Powermail=1.1.8
Alex Kellner Powermail=1.1.9
Alex Kellner Powermail=1.1.10
Alex Kellner Powermail=1.2.0
Alex Kellner Powermail=1.2.1
Alex Kellner Powermail=1.2.2
Alex Kellner Powermail=1.2.3
Alex Kellner Powermail=1.2.4
Alex Kellner Powermail=1.3.1
Alex Kellner Powermail=1.3.2
Alex Kellner Powermail=1.3.3
Alex Kellner Powermail=1.3.4
Alex Kellner Powermail=1.3.5
Alex Kellner Powermail=1.3.6
Alex Kellner Powermail=1.3.7
Alex Kellner Powermail=1.3.8
Alex Kellner Powermail=1.3.9
Alex Kellner Powermail=1.3.10
Alex Kellner Powermail=1.3.11
Alex Kellner Powermail=1.3.12
Alex Kellner Powermail=1.3.13
Alex Kellner Powermail=1.3.14
Alex Kellner Powermail=1.3.15
Alex Kellner Powermail=1.3.16
Alex Kellner Powermail=1.4.1
Alex Kellner Powermail=1.4.2
Alex Kellner Powermail=1.4.3
Alex Kellner Powermail=1.4.4
Alex Kellner Powermail=1.4.5
Alex Kellner Powermail=1.4.6
Alex Kellner Powermail=1.4.7
Alex Kellner Powermail=1.4.8
Alex Kellner Powermail=1.4.9
Alex Kellner Powermail=1.4.10
Alex Kellner Powermail=1.4.11
Alex Kellner Powermail=1.4.12
Alex Kellner Powermail=1.4.13
Alex Kellner Powermail=1.4.14
Alex Kellner Powermail=1.4.15
Alex Kellner Powermail=1.4.16
Alex Kellner Powermail=1.4.17
Alex Kellner Powermail=1.4.18
Alex Kellner Powermail=1.5.0
Alex Kellner Powermail=1.5.1
Alex Kellner Powermail=1.5.3
Typo3 TYPO3
composer/in2code/powermail<1.6.5
1.6.5
Remediation
Event History
Nov 17, 2012
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
May 17, 2022
Advisory Published
via GitHub·01:38 AM
Frequently Asked Questions
1
What is the severity of CVE-2012-5889?
CVE-2012-5889 is classified with a severity level high due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2012-5889?
To fix CVE-2012-5889, you should upgrade to the powermail extension version 1.6.5 or later.
3
What type of vulnerability is CVE-2012-5889?
CVE-2012-5889 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary web scripts or HTML.
4
Which versions are affected by CVE-2012-5889?
CVE-2012-5889 affects powermail extension versions prior to 1.6.5.
5
Can CVE-2012-5889 be exploited remotely?
Yes, CVE-2012-5889 can be exploited remotely by attackers to execute malicious scripts in a user's browser.