← All advisories

Moderate severityNVD Advisory· Published Oct 3, 2014· Updated Jun 17, 2026

CVE-2014-6288

CVE-2014-6288

Description

The powermail extension 2.x before 2.0.11 for TYPO3 allows remote attackers to bypass the CAPTCHA protection mechanism via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
in2code/powermailPackagist	>= 2.0.0, < 2.0.11	2.0.11

Affected products

12

Alex Kellner/Powermail11 versions
cpe:2.3:a:alex_kellner:powermail:2.0.0:*:*:*:*:typo3:*:*+ 10 more
- cpe:2.3:a:alex_kellner:powermail:2.0.0:*:*:*:*:typo3:*:*
- cpe:2.3:a:alex_kellner:powermail:2.0.10:*:*:*:*:typo3:*:*
- cpe:2.3:a:alex_kellner:powermail:2.0.1:*:*:*:*:typo3:*:*
- cpe:2.3:a:alex_kellner:powermail:2.0.2:*:*:*:*:typo3:*:*
- cpe:2.3:a:alex_kellner:powermail:2.0.3:*:*:*:*:typo3:*:*
- cpe:2.3:a:alex_kellner:powermail:2.0.4:*:*:*:*:typo3:*:*
- cpe:2.3:a:alex_kellner:powermail:2.0.5:*:*:*:*:typo3:*:*
- cpe:2.3:a:alex_kellner:powermail:2.0.6:*:*:*:*:typo3:*:*
- cpe:2.3:a:alex_kellner:powermail:2.0.7:*:*:*:*:typo3:*:*
- cpe:2.3:a:alex_kellner:powermail:2.0.8:*:*:*:*:typo3:*:*
- cpe:2.3:a:alex_kellner:powermail:2.0.9:*:*:*:*:typo3:*:*
ghsa-coords
pkg:composer/in2code/powermail
Range: >= 2.0.0, < 2.0.11

Patches

Vulnerability mechanics

References

5

typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-006/nvdVendor Advisory
github.com/advisories/GHSA-2jq7-pgqq-gqqjghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2014-6288ghsaADVISORY
typo3.org/extensions/repository/view/powermailnvdWEB
typo3.org/security/advisory/typo3-ext-sa-2014-006ghsaWEB

News mentions

0

No linked articles in our index yet.