Vulnerability index

Browse CVEs

10 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Jqueryform CRITICAL 9.8
CVE-2022-24984

Forms generated by JQueryForm.com before 2022-02-05 (if file-upload capability is enabled) allow remote unauthenticated attackers to upload executabl…

Fix: 2022-02-05+
Fix from $2,300 2022-02-16
Jqueryform HIGH 8.8
CVE-2022-24985

Forms generated by JQueryForm.com before 2022-02-05 allows a remote authenticated attacker to bypass authentication and access the administrative sec…

Fix: 2022-02-05+
Fix from $1,950 2022-02-16
Jqueryform HIGH 7.5
CVE-2022-24983

Forms generated by JQueryForm.com before 2022-02-05 allow remote attackers to obtain the URI to any uploaded file by capturing the POST response. Whe…

Fix: 2022-02-05+
Fix from $1,950 2022-02-16
Jqueryform MEDIUM 6.5
CVE-2022-24982

Forms generated by JQueryForm.com before 2022-02-05 allows a remote authenticated attacker to access the cleartext credentials of all other form user…

Fix: 2022-02-05+
Fix from $1,600 2022-02-16
Jqueryform MEDIUM 6.1
CVE-2022-24981

A reflected cross-site scripting (XSS) vulnerability in forms generated by JQueryForm.com before 2022-02-05 allows remote attackers to inject arbitra…

Fix: 2022-02-05+
Fix from $1,600 2022-02-16
Php Formmail Generator CRITICAL 9.8
CVE-2016-9482

Code generated by PHP FormMail Generator may allow a remote unauthenticated user to bypass authentication in the to access the administrator panel by…

Mitigation only
Fix from $2,300 2018-07-13
Php Formmail Generator CRITICAL 9.8
CVE-2016-9483

The PHP form code generated by PHP FormMail Generator deserializes untrusted input as part of the phpfmg_filman_download() function. A remote unauthe…

Mitigation only
Fix from $2,300 2018-07-13
Php Formmail Generator CRITICAL 9.8
CVE-2016-9492

The code generated by PHP FormMail Generator prior to 17 December 2016 is vulnerable to unrestricted upload of dangerous file types. In the generated…

Fix: 2016-12-17+
Fix from $2,300 2018-07-13
Php Formmail Generator HIGH 7.5
CVE-2016-9484

The generated PHP form code does not properly validate user input folder directories, allowing a remote unauthenticated attacker to perform a path tr…

Fix: 2016-12-06+
Fix from $1,950 2018-07-13
Php Formmail Generator MEDIUM 6.1
CVE-2016-9493

The code generated by PHP FormMail Generator prior to 17 December 2016 is vulnerable to stored cross-site scripting. In the generated form.lib.php fi…

Fix: 2016-12-17+
Fix from $1,600 2018-07-13