Dkd

dkd

6 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-12700 1Dkd 1Direct Mail Jun 17, 2026 May 13, 2020 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 The direct_mail extension through 5.2.3 for TYPO3 allows Information Disclosure via a newsletter subscriber data Special Query.
CVE-2020-12699 1Dkd 1Direct Mail Jun 17, 2026 May 13, 2020 N/A· v4 6.1 MEDIUM· v3 5.8 MEDIUM· v2 The direct_mail extension through 5.2.3 for TYPO3 has an Open Redirect via jumpUrl.
CVE-2020-12698 1Dkd 1Direct Mail Jun 17, 2026 May 13, 2020 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 The direct_mail extension through 5.2.3 for TYPO3 has Broken Access Control for newsletter subscriber tables.
CVE-2020-12697 1Dkd 1Direct Mail Jun 17, 2026 May 13, 2020 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 The direct_mail extension through 5.2.3 for TYPO3 allows Denial of Service via log entries.
CVE-2019-16698 1Dkd 1Direct Mail Jun 17, 2026 Oct 16, 2019 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 The direct_mail (aka Direct Mail) extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user (with restricted permissions to the fe_users table) to view and export data of fronten...Show more The direct_mail (aka Direct Mail) extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user (with restricted permissions to the fe_users table) to view and export data of frontend users who are subscribed to a newsletter.Show less
CVE-2013-7400 1Dkd 1Direct Mail May 13, 2026 Dec 29, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The Direct Mail (direct_mail) extension before 3.1.2 for TYPO3 allows remote attackers to obtain sensitive information by leveraging improper checking of authentication codes.