Browse CVEs

HIGH 8.8 CVE-2024-37765 Machform up to version 19 is affected by an authenticated Blind SQL injection in the user account settings page. Machform after 19 Fix from $1,9502024-07-01 MEDIUM 5.4 CVE-2024-37763 MachForm up to version 19 is affected by an unauthenticated stored cross-site scripting which affects users with valid sessions whom can view compile… Machform after 19 Fix from $1,6002024-07-01 MEDIUM 5.4 CVE-2024-37764 MachForm up to version 19 is affected by an authenticated stored cross-site scripting. Machform after 19 Fix from $1,6002024-07-01 CRITICAL 9.9 CVE-2024-37762 MachForm up to version 21 is affected by an authenticated unrestricted file upload which leads to a remote code execution. Machform 21+ Fix from $2,3002024-07-01 HIGH 8.8 CVE-2021-20102 Machform prior to version 16 is vulnerable to cross-site request forgery due to a lack of CSRF tokens in place. Machform 16+ Fix from $1,9502021-06-29 HIGH 8.1 CVE-2021-20104 Machform prior to version 16 is vulnerable to unauthenticated remote code execution due to insufficient sanitization of file attachments uploaded wit… Machform 16+ Fix from $1,9502021-06-29 MEDIUM 6.1 CVE-2021-20101 Machform prior to version 16 is vulnerable to HTTP host header injection due to improperly validated host headers. This could cause a victim to recei… Machform 16+ Fix from $1,6002021-06-29 MEDIUM 6.1 CVE-2021-20103 Machform prior to version 16 is vulnerable to stored cross-site scripting due to insufficient sanitization of file attachments uploaded with forms th… Machform 16+ Fix from $1,6002021-06-29 MEDIUM 6.1 CVE-2021-20105 Machform prior to version 16 is vulnerable to an open redirect in Safari_init.php due to an improperly sanitized 'ref' parameter. Machform 16+ Fix from $1,6002021-06-29 CRITICAL 9.8 CVE-2018-6410 An issue was discovered in Appnitro MachForm before 4.2.3. There is a download.php SQL injection via the q parameter. Machform No fix yet Fix from $2,3002018-05-26 CRITICAL 9.8 CVE-2018-6411EPSS 6% An issue was discovered in Appnitro MachForm before 4.2.3. When the form is set to filter a blacklist, it automatically adds dangerous extensions to … Machform No fix yet Fix from $2,3002018-05-26 MEDIUM 5.3 CVE-2018-6409EPSS 15% An issue was discovered in Appnitro MachForm before 4.2.3. The module in charge of serving stored files gets the path from the database. Modifying th… Machform No fix yet Fix from $1,6002018-05-26 HIGH 7.5 CVE-2013-4948 SQL injection vulnerability in view.php in Machform 2 allows remote attackers to execute arbitrary SQL commands via the element_2 parameter. Machform No fix yet Fix from $1,9502013-07-29 MEDIUM 6.8 CVE-2013-4949EPSS 5% Unrestricted file upload vulnerability in view.php in Machform 2 allows remote attackers to execute arbitrary PHP code by uploading a PHP file, then … Machform No fix yet Fix from $1,6002013-07-29