CVE-2014-3947
CVE-2014-3947
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Unrestricted file upload vulnerability in the powermail extension before 1.6.11 and 2.x before 2.0.14 for TYPO3 allows remote attackers to execute arbitrary code by uploading a file with a crafted extension, then accessing it via unspecified vectors.
CVSS 9.3 · Critical · EPSS 2.3% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
in2code/powermail Packagist
- Affected ranges
- ECOSYSTEM: < 1.6.11
Update to 1.6.11
in2code/powermail Packagist
- Affected ranges
- ECOSYSTEM: ≥ 2.0.0, < 2.0.14
Update to 2.0.14