Information disclosure

2007-01-0911:28:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.4%

JSON

formbankcgi.exe in Fersch Formbankserver 1.9, when the PATH_INFO begins with (1) AbfrageForm or (2) EingabeForm, allows remote attackers to cause a denial of service (daemon crash) via multiple requests containing many /…/ sequences in the Name parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

CPENameOperatorVersion
formbankservereq1.9

CPE	Name	Operator	Version
	formbankserver	eq	1.9

References

osvdb.org/32546

secunia.com/advisories/23539

exchange.xforce.ibmcloud.com/vulnerabilities/31216