CVE-2014-6288
published 2014-10-03CVE-2014-6288: The powermail extension 2.x before 2.0.11 for TYPO3 allows remote attackers to bypass the CAPTCHA protection mechanism via unspecified vectors.
PriorityP340high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.91%
77.2th percentile
The powermail extension 2.x before 2.0.11 for TYPO3 allows remote attackers to bypass the CAPTCHA protection mechanism via unspecified vectors.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| alex_kellner | powermail | — | — |
| alex_kellner | powermail | — | — |
| alex_kellner | powermail | — | — |
| alex_kellner | powermail | — | — |
| alex_kellner | powermail | — | — |
| alex_kellner | powermail | — | — |
| alex_kellner | powermail | — | — |
| alex_kellner | powermail | — | — |
| alex_kellner | powermail | — | — |
| alex_kellner | powermail | — | — |
| alex_kellner | powermail | — | — |
| in2code | powermail | >= 2.0.0 < 2.0.11 | 2.0.11 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
TYPO3 powermail extension allows remote attackers to bypass CAPTCHA protection mechanism
osv·2022-05-17
CVE-2014-6288 [MEDIUM] TYPO3 powermail extension allows remote attackers to bypass CAPTCHA protection mechanism
TYPO3 powermail extension allows remote attackers to bypass CAPTCHA protection mechanism
The powermail extension 2.x before 2.0.11 for TYPO3 allows remote attackers to bypass the CAPTCHA protection mechanism via unspecified vectors.
GHSA
TYPO3 powermail extension allows remote attackers to bypass CAPTCHA protection mechanism
ghsa·2022-05-17
CVE-2014-6288 [MEDIUM] CWE-287 TYPO3 powermail extension allows remote attackers to bypass CAPTCHA protection mechanism
TYPO3 powermail extension allows remote attackers to bypass CAPTCHA protection mechanism
The powermail extension 2.x before 2.0.11 for TYPO3 allows remote attackers to bypass the CAPTCHA protection mechanism via unspecified vectors.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2014-10-03
Published