CVE-2022-38400

2022-09-0807:10:47

jpcert

www.cve.org

mailform pro cgi

vulnerability

user input

remote attacker

url exploit

5.9 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.6%

JSON

Mailform Pro CGI 4.3.1 and earlier allow a remote unauthenticated attacker to obtain the user input data by having a use of the product to access a specially crafted URL.

CNA Affected

[
  {
    "product": "Mailform Pro CGI",
    "vendor": "SYNCK GRAPHICA",
    "versions": [
      {
        "status": "affected",
        "version": "4.3.1 and earlier"
      }
    ]
  }
]