formtools kayıtları
formtools üreticisine ait 13 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-94 Improper Control of Generation of Code ('Code Injection')2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-73 External Control of File Name or Path1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
13 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2021-38145İstismar yok | An issue was discovered in Form Tools through 3.0.20.formtools · core · CWE-89 | Kritik9,8 | — | %2,2 | 31 Ağu 2021 |
38İzleyin | CVE-2024-22718İstismar yok | Cross Site Scripting (XSS) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the client_id parameter in the appliformtools · form tools · CWE-79 | Kritik9,6 | — | %0,7 | 11 Nis 2024 |
32İzleyin | CVE-2024-22719İstismar yok | SQL Injection vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary SQL commands via the 'keyword' when searching for a clientformtools · form tools · CWE-89 | Yüksek8,1 | — | %0,5 | 11 Nis 2024 |
28İzleyin | CVE-2024-22722Kavram kanıtı | Server Side Template Injection (SSTI) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary commands via the Group Name field formtools · form tools · CWE-94 | Yüksek7,2 | — | %0,9 | 11 Nis 2024 |
25İzleyin | CVE-2024-22721İstismar yok | Cross Site Request Forgery (CSRF) vulnerability in Form Tools 3.1.1 allows attackers to manipulate sensitive user data via crafted link.formtools · form tools · CWE-352 | Orta6,3 | — | %0,2 | 11 Nis 2024 |
24İzleyin | CVE-2021-38143İstismar yok | An issue was discovered in Form Tools through 3.0.20.formtools · core · CWE-79 | Orta6,1 | — | %1,4 | 31 Ağu 2021 |
24İzleyin | CVE-2024-22637İstismar yok | Form Tools v3.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /form_builder/preview.phpformtools · form tools · CWE-79 | Orta6,1 | — | %0,5 | 25 Oca 2024 |
24İzleyin | CVE-2024-22717İstismar yok | Cross Site Scripting (XSS) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the First Name field in the applicatformtools · form tools · CWE-79 | Orta6,1 | — | %0,4 | 11 Nis 2024 |
21İzleyin | CVE-2021-38144İstismar yok | An issue was discovered in Form Tools through 3.0.20.formtools · core · CWE-79 | Orta5,4 | — | %0,9 | 31 Ağu 2021 |
20İzleyin | CVE-2024-6936İstismar yok | formtools.org Form Tools Setting code injectionformtools · form tools · CWE-94 | Orta5,1 | — | %0,4 | 21 Tem 2024 |
20İzleyin | CVE-2024-6934İstismar yok | formtools.org Form Tools cross site scriptingformtools · form tools · CWE-79 | Orta5,1 | — | %0,4 | 20 Tem 2024 |
20İzleyin | CVE-2024-6937İstismar yok | formtools.org Form Tools Import Option List edit.php curl_exec file inclusionformtools · form tools · CWE-73 | Orta5,1 | — | %0,4 | 21 Tem 2024 |
20İzleyin | CVE-2024-6935İstismar yok | formtools.org Form Tools User Settings Page cross site scriptingformtools · form tools · CWE-79 | Orta5,1 | — | %0,3 | 20 Tem 2024 |
- CVE-2021-3814540Planlayın
An issue was discovered in Form Tools through 3.0.20.
KritikCVSS 9,8İstismar yokEPSS %2formtools · core31 Ağu 2021
- CVE-2024-2271838İzleyin
Cross Site Scripting (XSS) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the client_id parameter in the appli
KritikCVSS 9,6İstismar yokEPSS %1formtools · form tools11 Nis 2024
- CVE-2024-2271932İzleyin
SQL Injection vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary SQL commands via the 'keyword' when searching for a client
YüksekCVSS 8,1İstismar yokEPSS %1formtools · form tools11 Nis 2024
- CVE-2024-2272228İzleyin
Server Side Template Injection (SSTI) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary commands via the Group Name field
YüksekCVSS 7,2Kavram kanıtıEPSS %1formtools · form tools11 Nis 2024
- CVE-2024-2272125İzleyin
Cross Site Request Forgery (CSRF) vulnerability in Form Tools 3.1.1 allows attackers to manipulate sensitive user data via crafted link.
OrtaCVSS 6,3İstismar yokEPSS %0formtools · form tools11 Nis 2024
- CVE-2021-3814324İzleyin
An issue was discovered in Form Tools through 3.0.20.
OrtaCVSS 6,1İstismar yokEPSS %1formtools · core31 Ağu 2021
- CVE-2024-2263724İzleyin
Form Tools v3.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /form_builder/preview.php
OrtaCVSS 6,1İstismar yokEPSS %0formtools · form tools25 Oca 2024
- CVE-2024-2271724İzleyin
Cross Site Scripting (XSS) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the First Name field in the applicat
OrtaCVSS 6,1İstismar yokEPSS %0formtools · form tools11 Nis 2024
- CVE-2021-3814421İzleyin
An issue was discovered in Form Tools through 3.0.20.
OrtaCVSS 5,4İstismar yokEPSS %1formtools · core31 Ağu 2021
- CVE-2024-693620İzleyin
formtools.org Form Tools Setting code injection
OrtaCVSS 5,1İstismar yokEPSS %0formtools · form tools21 Tem 2024
- CVE-2024-693420İzleyin
formtools.org Form Tools cross site scripting
OrtaCVSS 5,1İstismar yokEPSS %0formtools · form tools20 Tem 2024
- CVE-2024-693720İzleyin
formtools.org Form Tools Import Option List edit.php curl_exec file inclusion
OrtaCVSS 5,1İstismar yokEPSS %0formtools · form tools21 Tem 2024
- CVE-2024-693520İzleyin
formtools.org Form Tools User Settings Page cross site scripting
OrtaCVSS 5,1İstismar yokEPSS %0formtools · form tools20 Tem 2024