Extension "HTML5 Video Player vs. Powermail" vulnerabilities
1 known vulnerability in Extension "HTML5 Video Player vs. Powermail" from TYPO3. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.3average CVSS score
Latest first
- 9.3 Critical severity
Extension "HTML5 Video Player vs. Powermail": Deserialization of Untrusted Data
The extension fails to safely process untrusted client input of an attacker-controlled cookie directly to PHP's unserialize(). A remote, unauthenticated attacker can supply a crafted serialized payload to trigger PHP Object Injection, leading to Remote Code Ex