İçeriğe atla
Noroxi

machform kayıtları

machform üreticisine ait 15 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
3
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 21
  3. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

15 kayıt
  • CVE-2018-6411
    41Planlayın

    An issue was discovered in Appnitro MachForm before 4.2.3.

    KritikCVSS 9,8Kavram kanıtıEPSS %6

    machform · machform26 May 2018

  • CVE-2018-6410
    40Planlayın

    An issue was discovered in Appnitro MachForm before 4.2.3.

    KritikCVSS 9,8Kavram kanıtıEPSS %5

    machform · machform26 May 2018

  • CVE-2024-37762
    39İzleyin

    MachForm up to version 21 is affected by an authenticated unrestricted file upload which leads to a remote code execution.

    KritikCVSS 9,9Kavram kanıtıEPSS %1

    machform · machform1 Tem 2024

  • CVE-2024-37765
    35İzleyin

    Machform up to version 19 is affected by an authenticated Blind SQL injection in the user account settings page.

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    machform · machform1 Tem 2024

  • CVE-2021-20102
    35İzleyin

    Machform prior to version 16 is vulnerable to cross-site request forgery due to a lack of CSRF tokens in place.

    YüksekCVSS 8,8İstismar yokEPSS %1

    machform · machform29 Haz 2021

  • CVE-2021-20104
    33İzleyin

    Machform prior to version 16 is vulnerable to unauthenticated remote code execution due to insufficient sanitization of file attachments upl

    YüksekCVSS 8,1İstismar yokEPSS %2

    machform · machform29 Haz 2021

  • CVE-2013-4948
    31İzleyin

    SQL injection vulnerability in view.php in Machform 2 allows remote attackers to execute arbitrary SQL commands via the element_2 parameter.

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    machform · machform29 Tem 2013

  • CVE-2013-4949
    29İzleyin

    Unrestricted file upload vulnerability in view.php in Machform 2 allows remote attackers to execute arbitrary PHP code by uploading a PHP fi

    OrtaCVSS 6,8Kavram kanıtıEPSS %5

    machform · machform29 Tem 2013

  • CVE-2018-6409
    25İzleyin

    An issue was discovered in Appnitro MachForm before 4.2.3.

    OrtaCVSS 5,3Kavram kanıtıEPSS %15

    machform · machform26 May 2018

  • CVE-2021-20105
    24İzleyin

    Machform prior to version 16 is vulnerable to an open redirect in Safari_init.php due to an improperly sanitized 'ref' parameter.

    OrtaCVSS 6,1İstismar yokEPSS %1

    machform · machform29 Haz 2021

  • CVE-2021-20101
    24İzleyin

    Machform prior to version 16 is vulnerable to HTTP host header injection due to improperly validated host headers.

    OrtaCVSS 6,1İstismar yokEPSS %1

    machform · machform29 Haz 2021

  • CVE-2021-20103
    24İzleyin

    Machform prior to version 16 is vulnerable to stored cross-site scripting due to insufficient sanitization of file attachments uploaded with

    OrtaCVSS 6,1İstismar yokEPSS %1

    machform · machform29 Haz 2021

  • CVE-2024-37763
    21İzleyin

    MachForm up to version 19 is affected by an unauthenticated stored cross-site scripting which affects users with valid sessions whom can vie

    OrtaCVSS 5,4Kavram kanıtıEPSS %1

    machform · machform1 Tem 2024

  • CVE-2024-37764
    21İzleyin

    MachForm up to version 19 is affected by an authenticated stored cross-site scripting.

    OrtaCVSS 5,4Kavram kanıtıEPSS %1

    machform · machform1 Tem 2024

  • CVE-2013-4950
    18İzleyin

    Cross-site scripting (XSS) vulnerability in view.php in Machform 2 allows remote attackers to inject arbitrary web script or HTML via the el

    OrtaCVSS 4,3Kavram kanıtıEPSS %4

    machform · machform29 Tem 2013