Skip to content
Noroxi

alex kellner records

9 published records for vendor alex kellner.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
55.6%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    9 records
    • CVE-2014-3947
      31Monitor

      Unrestricted file upload vulnerability in the powermail extension before 1.6.11 and 2.x before 2.0.14 for TYPO3 allows remote attackers to e

      HighCVSS 7.5No exploitEPSS 2%

      alex kellner · powermailOct 3, 2014

    • CVE-2014-6288
      31Monitor

      The powermail extension 2.x before 2.0.11 for TYPO3 allows remote attackers to bypass the CAPTCHA protection mechanism via unspecified vecto

      HighCVSS 7.5No exploitEPSS 1%

      alex kellner · powermailOct 3, 2014

    • CVE-2010-0329
      30Monitor

      SQL injection vulnerability in the powermail extension 1.5.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands

      HighCVSS 7.5No exploitEPSS 1%

      typo3 · typo3Jan 15, 2010

    • CVE-2010-3604
      30Monitor

      SQL injection vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands

      HighCVSS 7.5No exploitEPSS 1%

      typo3 · typo3Sep 24, 2010

    • CVE-2010-3687
      20Monitor

      Unspecified vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to bypass validation have an unspec

      MediumCVSS 5.0No exploitEPSS 1%

      typo3 · typo3Sep 29, 2010

    • CVE-2014-3948
      17Monitor

      Cross-site scripting (XSS) vulnerability in the HTML export wizard in the backend module in the powermail extension before 1.6.11 for TYPO3

      MediumCVSS 4.3No exploitEPSS 1%

      typo3 · typo3Jun 4, 2014

    • CVE-2010-4892
      17Monitor

      Cross-site scripting (XSS) vulnerability in the powermail extension before 1.5.5 for TYPO3 allows remote attackers to inject arbitrary web s

      MediumCVSS 4.3No exploitEPSS 1%

      typo3 · typo3Oct 7, 2011

    • CVE-2010-3605
      17Monitor

      Cross-site scripting (XSS) vulnerability in the powermail extension 1.5.3 and earlier for TYPO3 allows remote attackers to inject arbitrary

      MediumCVSS 4.3No exploitEPSS 1%

      typo3 · typo3Sep 24, 2010

    • CVE-2012-5889
      17Monitor

      Cross-site scripting (XSS) vulnerability in the powermail extension before 1.6.5 for TYPO3 allows remote attackers to inject arbitrary web s

      MediumCVSS 4.3No exploitEPSS 0%

      typo3 · typo3Nov 17, 2012