CVE-2010-3667

MediumCVSS 5.3/10Last modified Jun 16, 2026

Description

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Spam Abuse in the native form content element.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719Mailing List, Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2010-3667Third Party Advisory
https://typo3.org/security/advisory/typo3-sa-2010-012/#Spam_AbuseVendor Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719Mailing List, Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2010-3667Third Party Advisory
https://typo3.org/security/advisory/typo3-sa-2010-012/#Spam_AbuseVendor Advisory

Timeline

Published: Nov 4, 2019
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-36687.5TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Header Injection in the secure download feature j CVE-2010-36695.4TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS and Open Redirection in the frontend login box.CVE-2010-36704.8TYPO3 before 4.3.4 and 4.4.x before 4.4.1 contains insecure randomness during generation of a hash with the "forgot password" function.CVE-2010-36716.5TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 is open to a session fixation attack which allows remote CVE-2010-36726.1TYPO3 before 4.3.4 and 4.4.x before 4.4.1 allows XSS in the textarea view helper in an extbase extension.CVE-2010-36735.3TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows information disclosure in the mail header of the HTML mailing API.CVE-2010-36746.1TYPO3 before 4.4.1 allows XSS in the frontend search box.CVE-2010-36764.0storage/innobase/dict/dict0crea.c in mysqld in Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service CVE-2010-36774.0Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) vi CVE-2010-36784.0Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (crash) via (1) IN or (2) CASE operations with CVE-2010-36794.0Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via certain arguments to CVE-2010-36804.0Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by creating temporary ta