175 matches found
PT-2024-37973 · Unknown · Form Tools
Name of the Vulnerable Software and Affected Versions: Form Tools version 3.1.1 Description: A problematic issue was found in the User Settings Page component, specifically affecting the /admin/clients/ file. This issue leads to cross-site scripting and can be initiated remotely. The exploit has...
CVE-2024-6937: External Control of File Name or Path
A vulnerability, which was classified as problematic, was found in formtools.org Form Tools 3.1.1. Affected is the function curlexec of the file /admin/forms/optionlists/edit.php of the component Import Option List. The manipulation of the argument url leads to file inclusion. It is possible to...
PT-2024-37974 · Unknown · Form Tools
Name of the Vulnerable Software and Affected Versions: Form Tools version 3.1.1 Description: A problematic issue has been found in the Setting Handler component, affecting the file /admin/settings/index.php?page=accounts. The manipulation of the Page Theme argument leads to code injection. This...
PT-2024-37975 · Unknown · Form Tools
Name of the Vulnerable Software and Affected Versions: Form Tools version 3.1.1 Description: A problematic issue was found in the Import Option List component, specifically affecting the curl exec function in the /admin/forms/option lists/edit.php file. The manipulation of the url argument leads ...
CVE-2024-6935: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic was found in formtools.org Form Tools 3.1.1. This vulnerability affects unknown code of the file /admin/clients/ of the component User Settings Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has bee...
PT-2024-37972 · Unknown · Form Tools
Name of the Vulnerable Software and Affected Versions: Form Tools version 3.1.1 Description: A problematic vulnerability has been found in Form Tools, affecting an unknown part of the file /admin/forms/add/step2.php?submission type=direct. The manipulation of the Form URL argument leads to...
CVE-2024-22719
SQL Injection vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary SQL commands via the 'keyword' when searching for a client...
CVE-2024-22721
Cross Site Request Forgery CSRF vulnerability in Form Tools 3.1.1 allows attackers to manipulate sensitive user data via crafted link...
CVE-2024-22719
SQL Injection vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary SQL commands via the 'keyword' when searching for a client...
CVE-2024-22717
Cross Site Scripting XSS vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the First Name field in the application...
CVE-2024-22722
Server Side Template Injection SSTI vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary commands via the Group Name field under the add forms section of the application...
CVE-2024-22718
Cross Site Scripting XSS vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the clientid parameter in the application URL...
CVE-2024-22718
Cross Site Scripting XSS vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the clientid parameter in the application URL...
CVE-2024-22722
Server Side Template Injection SSTI vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary commands via the Group Name field under the add forms section of the application...
CVE-2024-22722
Server Side Template Injection SSTI vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary commands via the Group Name field under the add forms section of the application...
CVE-2024-22721
Cross Site Request Forgery CSRF vulnerability in Form Tools 3.1.1 allows attackers to manipulate sensitive user data via crafted link...
CVE-2024-22717: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the First Name field in the application...
CVE-2024-22721: Cross-Site Request Forgery (CSRF)
Cross Site Request Forgery CSRF vulnerability in Form Tools 3.1.1 allows attackers to manipulate sensitive user data via crafted link...
PT-2024-19541 · Unknown · Form Tools
Name of the Vulnerable Software and Affected Versions: Form Tools version 3.1.1 Description: A Cross Site Request Forgery CSRF issue allows attackers to manipulate sensitive user data via a crafted link. This can lead to unauthorized access and modification of user information. Recommendations: F...