CVE Tools
Track your stack

IN2CODE

1 CVEs tracked since 2008. Since May 2008, none of them reached CISA KEV.

IN2CODE CVEs per month

May 2008 to May 2008. Point at a month, or focus the strip and use the arrow keys.
IN2CODE CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2008-0510

Products

The products that kept showing up in IN2CODE's monthly top three, with their CVEs summed over those months.

  1. Powermail11 month

Latest CVEs

The 10 most recently published vulnerabilities affecting IN2CODE.

  1. CVE-2024-47047An issue was discovered in the powermail extension through 12.4.0 for TYPO3. It fails to validate the mail parameter of the createAction, resulting in Insecure Direct Object Reference (IDOR) in som...7.5
  2. CVE-2024-45233An issue was discovered in powermail extension through 12.3.5 for TYPO3. Several actions in the OutputController can directly be called, due to missing or insufficiently implemented access checks, ...9.8
  3. CVE-2024-45232An issue was discovered in powermail extension through 12.3.5 for TYPO3. It fails to validate the mail parameter of the confirmationAction, resulting in Insecure Direct Object Reference (IDOR). An ...5.3
  4. CVE-2022-44543The femanager extension before 5.5.2, 6.x before 6.3.3, and 7.x before 7.0.1 for TYPO3 allows creation of frontend users in restricted groups (if there is a usergroup field on the registration form...5.3
  5. CVE-2023-25013An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the InvitationController allow an unauthenticated user to...8.6
  6. CVE-2023-25014An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the InvitationController allow an unauthenticated user to...8.6
  7. CVE-2022-35628A SQL injection issue was discovered in the lux extension before 17.6.1, and 18.x through 24.x before 24.0.2, for TYPO3.9.8
  8. CVE-2021-36787The femanager extension before 5.5.1 and 6.x before 6.3.1 for TYPO3 allows XSS via a crafted SVG document.5.4
  9. CVE-2014-6292The femanager extension before 1.0.9 for TYPO3 allows remote frontend users to modify or delete the records of other frontend users via unspecified vectors.6.4
  10. CVE-2008-2182Cross-site scripting (XSS) vulnerability in the powermail extension before 1.1.10 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.4.3

The record

Peak rank
#145 in May 2008
Busiest month shown
May 2008, 1 CVEs
Months with a KEV entry
0 since May 2008
Monthly snapshots
1 since 2008
IN2CODE's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store