CVE-2026-78839

CVE-2026-78839 Description An arbitrary file upload vulnerability in AppNitro MachForm v30 allows attackers to execute arbitrary code via uploading a crafted .phar file. Successful exploitation of this issue requires two practical caveats. First, an attacker must either identify an existing form...

CVE-2026-78837

CVE-2026-78837 Description An SQL injection vulnerability in the apformid parameter in AppNitro MachForm v30 allows attackers to access sensitive database information via a crafted SQL statement. Affected Component Tested on MachForm - Version 30 Attack Type Remote Attack Vectors An unauthenticat...

CVE-2026-78837

A SQL injection vulnerability in the apformid parameter in AppNitro MachForm v30 allows attackers to access sensitive database information via a crafted SQL statement...

CVE-2026-78838

A reflected cross-site scripting XSS vulnerability in the griddatasource.php component of AppNitro MachForm v30 allows attackers to execute arbitrary Javascript in the context of the victim's browser via injecting a crafted payload into the filterfilters0field parameter...

PT-2026-87069

A reflected cross-site scripting XSS vulnerability in the grid datasource.php component of AppNitro MachForm v30 allows attackers to execute arbitrary Javascript in the context of the victim's browser via injecting a crafted payload into the filterfilters0field parameter...

CVE-2026-78837

A SQL injection vulnerability in the apformid parameter in AppNitro MachForm v30 allows attackers to access sensitive database information via a crafted SQL statement...

EUVD-2026-72775

A reflected cross-site scripting XSS vulnerability in the griddatasource.php component of AppNitro MachForm v30 allows attackers to execute arbitrary Javascript in the context of the victim's browser via injecting a crafted payload into the filterfilters0field parameter...

PT-2026-87099

A SQL injection vulnerability in the ap form id parameter in AppNitro MachForm v30 allows attackers to access sensitive database information via a crafted SQL statement...

EUVD-2026-72851

A SQL injection vulnerability in the apformid parameter in AppNitro MachForm v30 allows attackers to access sensitive database information via a crafted SQL statement...

CVE-2026-78838: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in the griddatasource.php component of AppNitro MachForm v30 allows attackers to execute arbitrary Javascript in the context of the victim's browser via injecting a crafted payload into the filterfilters0field parameter...

CVE-2026-78838

A reflected cross-site scripting XSS vulnerability in the griddatasource.php component of AppNitro MachForm v30 allows attackers to execute arbitrary Javascript in the context of the victim's browser via injecting a crafted payload into the filterfilters0field parameter...

CVE-2026-78838

A reflected cross-site scripting XSS vulnerability in the griddatasource.php component of AppNitro MachForm v30 allows attackers to execute arbitrary Javascript in the context of the victim's browser via injecting a crafted payload into the filterfilters0field parameter...

CVE-2026-78838

AppNitro MachForm v30 is vulnerable to a reflected cross-site scripting (XSS) vulnerability in the grid_datasource.php component. An unauthenticated attacker can execute arbitrary JavaScript in a victim's browser by injecting a crafted payload into the filter[filters][0][field] parameter. The vul...

CVE-2026-78837

AppNitro MachForm v30 is vulnerable to a remote SQL injection vulnerability within the ap_form_{id} parameter. An unauthenticated attacker can exploit the filter[filters][0][field] parameter in grid_datasource.php to execute crafted SQL statements. This flaw allows for the enumeration of valid co...

CVE-2026-78837: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in the apformid parameter in AppNitro MachForm v30 allows attackers to access sensitive database information via a crafted SQL statement...

CVE-2026-78839

An arbitrary file upload vulnerability in AppNitro MachForm v30 allows attackers to execute arbitrary code via uploading a crafted .phar file...

CVE-2026-78839

An arbitrary file upload vulnerability in AppNitro MachForm v30 allows attackers to execute arbitrary code via uploading a crafted .phar file...

EUVD-2026-71712

An arbitrary file upload vulnerability in AppNitro MachForm v30 allows attackers to execute arbitrary code via uploading a crafted .phar file...

CVE-2026-78839: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in AppNitro MachForm v30 allows attackers to execute arbitrary code via uploading a crafted .phar file...

CVE-2026-78839

AppNitro MachForm v30 is vulnerable to an arbitrary file upload vulnerability that enables remote code execution . An unauthenticated attacker can exploit this by uploading a crafted .phar file to a form that permits that extension. Successful exploitation requires the attacker to identify a form...