Vulnerability index

Browse CVEs

14 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Mysiteforme CRITICAL 9.8
CVE-2025-26136

A SQL injection vulnerability exists in mysiteforme versions prior to 2025.01.1.

Fix: 2025-01-01+
Fix from $2,300 2025-03-04
Mysiteforme CRITICAL 9.1
CVE-2024-57763

MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/addField.

Fix: 2025-01-01+
Fix from $2,300 2025-01-15
Mysiteforme CRITICAL 9.1
CVE-2024-57764

MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/add.

Fix: 2025-01-01+
Fix from $2,300 2025-01-15
Mysiteforme CRITICAL 9.1
CVE-2024-57766

MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/editField.

Fix: 2025-01-01+
Fix from $2,300 2025-01-15
Mysiteforme HIGH 8.6
CVE-2024-57767

MSFM before v2025.01.01 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /file/download.

Fix: 2025-01-01+
Fix from $1,950 2025-01-15
Mysiteforme HIGH 7.5
CVE-2024-57765

MSFM before 2025.01.01 was discovered to contain a SQL injection vulnerability via the s_name parameter at table/list.

Fix: 2025-01-01+
Fix from $1,950 2025-01-15
Mysiteforme HIGH 7.5
CVE-2024-57762

MSFM before v2025.01.01 was discovered to contain a deserialization vulnerability via the pom.xml configuration file.

Fix: 2025-01-01+
Fix from $1,950 2025-01-15
Mysiteforme HIGH 8.8
CVE-2024-13139

A vulnerability was found in wangl1989 mysiteforme 1.0. It has been rated as critical. This issue affects the function doContent of the file src/main…

No fix yet
Fix from $1,950 2025-01-05
Mysiteforme HIGH 8.8
CVE-2024-13138

A vulnerability was found in wangl1989 mysiteforme 1.0. It has been declared as critical. This vulnerability affects the function upload of the file …

No fix yet
Fix from $1,950 2025-01-05
Mysiteforme MEDIUM 5.4
CVE-2024-13137

A vulnerability was found in wangl1989 mysiteforme 1.0. It has been classified as problematic. This affects the function RestResponse of the file src…

No fix yet
Fix from $1,600 2025-01-05
Mysiteforme CRITICAL 9.8
CVE-2024-13136

A vulnerability was found in wangl1989 mysiteforme 1.0 and classified as critical. Affected by this issue is the function rememberMeManager of the fi…

No fix yet
Fix from $2,300 2025-01-05
Mysiteforme HIGH 7.5
CVE-2022-29309

mysiteforme v2.2.1 was discovered to contain a Server-Side Request Forgery.

No fix yet
Fix from $1,950 2022-05-24
Mysiteforme MEDIUM 5.4
CVE-2021-46026

mysiteforme, as of 19-12-2022, is vulnerable to Cross Site Scripting (XSS) via the add blog tag function in the blog tag in the background blog manag…

Fix: 2022-12-19+
Fix from $1,600 2022-01-20
Mysiteforme MEDIUM 6.5
CVE-2021-46027

mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management. The attacker constructs a CSRF load. Once the administrato…

No fix yet
Fix from $1,600 2022-01-19