CVE-2024-22722

A Server Side Template Injection (SSTI) vulnerability exists in Form Tools version 3.1.1 . This flaw allows attackers to execute arbitrary commands by exploiting the Group Name field within the application's add forms section. Publicly available proof-of-concept scripts, such as those found on Gi...

CVE-2024-22717

Cross Site Scripting XSS vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the First Name field in the application...

Form Tools 安全漏洞

Form Tools is an open source codebase for Form Tools scripts, modules, themes and APIs. A security vulnerability exists in Form Tools version 3.1.1, which stems from a cross-site scripting XSS vulnerability in the First Name field...

CVE-2024-22721

Cross Site Request Forgery CSRF vulnerability in Form Tools 3.1.1 allows attackers to manipulate sensitive user data via crafted link...

CVE-2024-22717

The Form Tools application, version 3.1.1 , is susceptible to a Cross-Site Scripting (XSS) vulnerability. The root cause is the improper neutralization of input in the First Name field, which allows attackers to execute arbitrary malicious scripts on the client-side. This could lead to unauthoriz...

CVE-2024-22718

Cross Site Scripting XSS vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the clientid parameter in the application URL...

CVE-2024-22722

Server Side Template Injection SSTI vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary commands via the Group Name field under the add forms section of the application...

Form Tools 跨站请求伪造漏洞

Form Tools is an open source codebase for form tool scripts, modules, themes, and APIs. A cross-site request forgery vulnerability exists in Form Tools version 3.1.1, which originates from a vulnerability that allows an attacker to manipulate sensitive user data via a crafted link...

CVE-2024-22718

A Cross Site Scripting (XSS) vulnerability exists in Form Tools version 3.1.1 . The issue is caused by improper neutralization of input within the client_id parameter in the application URL, which allows attackers to run arbitrary code on the client-side. As a temporary workaround, it is recommen...

CVE-2024-22721

A Cross-Site Request Forgery (CSRF) vulnerability exists in Form Tools version 3.1.1 , an open-source codebase for form tool scripts, modules, themes, and APIs. This flaw allows an attacker to manipulate sensitive user data by tricking a victim into clicking a crafted link . The impact includes u...

CVE-2024-22719

An SQL Injection vulnerability exists in Form Tools version 3.1.1 . The flaw originates from the improper neutralization of special elements in the 'keyword' parameter used when searching for a client. This allows an attacker to execute arbitrary SQL commands by manipulating the search functional...

PT-2024-19536 · Unknown · Form Tools

Name of the Vulnerable Software and Affected Versions: Form Tools version 3.1.1 Description: A Cross Site Scripting XSS issue allows attackers to run arbitrary code via the First Name field in the application. This enables attackers to execute malicious scripts on the client-side, potentially...

Form Tools SQL注入漏洞

Form Tools is an open source codebase for Form Tools scripts, modules, themes and APIs. A SQL injection vulnerability exists in Form Tools version 3.1.1, which originates from allowing an attacker to run arbitrary SQL commands via keyword while searching for clients...

CVE-2024-22719

SQL Injection vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary SQL commands via the 'keyword' when searching for a client...

PT-2024-19542

Name of the Vulnerable Software and Affected Versions Form Tools version 3.1.1 Description A Server Side Template Injection SSTI issue allows attackers to run arbitrary commands via the Group Name field under the add forms section of the application. Recommendations For Form Tools version 3.1.1,...

CVE-2024-22719: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary SQL commands via the 'keyword' when searching for a client...

CVE-2024-22722: Improper Control of Generation of Code

Server Side Template Injection SSTI vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary commands via the Group Name field under the add forms section of the application...

CVE-2024-22718: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the clientid parameter in the application URL...

CVE-2024-22719

SQL Injection vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary SQL commands via the 'keyword' when searching for a client...

PT-2024-19537 · Unknown · Form Tools

Name of the Vulnerable Software and Affected Versions: Form Tools version 3.1.1 Description: A Cross Site Scripting XSS issue allows attackers to run arbitrary code via the client id parameter in the application URL. This enables attackers to potentially execute malicious scripts on the...