İçeriğe atla
Noroxi

Formalms kayıtları

formalms üreticisine ait 16 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 20
  3. 21
  4. 22
  5. 23
  6. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

16 kayıt
  • CVE-2021-43136
    44Planlayın

    An authentication bypass issue in FormaLMS <= 2.4.4 allows an attacker to bypass the authentication mechanism and obtain a valid access to t

    KritikCVSS 9,8Kavram kanıtıEPSS %16

    formalms · formalms10 Kas 2021

  • CVE-2022-27104
    39İzleyin

    An Unauthenticated time-based blind SQL injection vulnerability exists in Forma LMS prior to v.1.4.3.

    KritikCVSS 9,8İstismar yokEPSS %1

    formalms · formalms19 Nis 2022

  • CVE-2019-5112
    35İzleyin

    Exploitable SQL injection vulnerability exists in the authenticated portion of Forma LMS 2.2.1.

    YüksekCVSS 8,8İstismar yokEPSS %2

    formalms · formalms3 Ara 2019

  • CVE-2019-5111
    35İzleyin

    Exploitable SQL injection vulnerability exists in the authenticated portion of Forma LMS 2.2.1.

    YüksekCVSS 8,8İstismar yokEPSS %1

    formalms · formalms3 Ara 2019

  • CVE-2019-5109
    35İzleyin

    Exploitable SQL injection vulnerabilities exists in the authenticated portion of Forma LMS 2.2.1.

    YüksekCVSS 8,8İstismar yokEPSS %1

    formalms · formalms3 Ara 2019

  • CVE-2019-5110
    35İzleyin

    Exploitable SQL injection vulnerabilities exist in the authenticated portion of Forma LMS 2.2.1.

    YüksekCVSS 8,8İstismar yokEPSS %1

    formalms · formalms3 Ara 2019

  • CVE-2022-42925
    35İzleyin

    Unrestricted Upload of File with Dangerous Type in Forma LMS

    YüksekCVSS 8,8İstismar yokEPSS %1

    formalms · formalms31 Eki 2022

  • CVE-2022-41681
    35İzleyin

    File Upload vulnerability in Forma LMS

    YüksekCVSS 8,8İstismar yokEPSS %1

    formalms · formalms31 Eki 2022

  • CVE-2020-26802
    35İzleyin

    forma.lms 2.3.0.2 is affected by Cross Site Request Forgery (CSRF) in formalms/appCore/index.php?r=lms/profile/show&ap=saveinfo via a GET re

    YüksekCVSS 8,8İstismar yokEPSS %1

    formalms · formalms8 Eki 2020

  • CVE-2022-42923
    35İzleyin

    SQL injection in Forma LMS

    YüksekCVSS 8,8İstismar yokEPSS %1

    formalms · formalms31 Eki 2022

  • CVE-2022-42924
    26İzleyin

    SQL injection in Forma LMS

    OrtaCVSS 6,5İstismar yokEPSS %0

    formalms · formalms31 Eki 2022

  • CVE-2022-41680
    26İzleyin

    SQL Injection in Forma LMS

    OrtaCVSS 6,5İstismar yokEPSS %0

    formalms · formalms31 Eki 2022

  • CVE-2022-41679
    24İzleyin

    Cross-site scripting in Forma LMS version

    OrtaCVSS 6,1İstismar yokEPSS %0

    formalms · formalms31 Eki 2022

  • CVE-2023-46693
    24İzleyin

    Cross Site Scripting (XSS) vulnerability in FormaLMS before 4.0.5 allows attackers to run arbitrary code via title parameters.

    OrtaCVSS 6,1İstismar yokEPSS %0

    formalms · formalms7 Ara 2023

  • CVE-2026-26744
    21İzleyin

    A user enumeration vulnerability exists in FormaLMS 4.1.18 and below in the password recovery functionality accessible via the /lostpwd endp

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    formalms · formalms19 Şub 2026

  • CVE-2014-5257
    18İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Forma Lms before 1.2.1 p01 allow remote attackers to inject arbitrary web script or H

    OrtaCVSS 4,3İstismar yokEPSS %2

    formalms · formalms6 Kas 2014