EUVD-2015-0907

Malware in sbrugna...

EUVD-2016-2313

Malware in sbrugna...

CVE-2018-0514

MP Form Mail CGI eCommerce Edition Ver 2.0.13 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors...

CVE-2018-0514

MP Form Mail CGI eCommerce Edition (futomi Co., Ltd.) is vulnerable to OS command injection (CWE-78). Affected: Ver 2.0.13 and earlier. Impact: remote attacker may execute arbitrary OS commands. Root cause: OS command injection in the CGI that handles web form mail. Remediation: update to the lat...

CVE-2018-0514: Improper Neutralization of Special Elements used in an OS Command

MP Form Mail CGI eCommerce Edition Ver 2.0.13 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors...

PT-2018-8873

Name of the Vulnerable Software and Affected Versions MP Form Mail CGI eCommerce Edition versions 2.0.13 and earlier Description The issue allows remote attackers to execute arbitrary OS commands. Recommendations For MP Form Mail CGI eCommerce Edition versions 2.0.13 and earlier, update to a...

CVE-2016-1212

Directory traversal vulnerability in futomi MP Form Mail CGI Professional Edition 3.2.3 and earlier allows remote authenticated administrators to read arbitrary files via unspecified vectors...

CVE-2016-1212

Directory traversal vulnerability in futomi MP Form Mail CGI Professional Edition 3.2.3 and earlier allows remote authenticated administrators to read arbitrary files via unspecified vectors...

CVE-2016-1212

CVE-2016-1212 affects Futomi MP Form Mail CGI Professional Edition up to version 3.2.3, exposing a directory traversal vulnerability (CWE-22). The flaw allows remote authenticated administrators to read arbitrary files on the server via unspecified vectors. Public records from NVD/JVN describe th...

CVE-2016-1212: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in futomi MP Form Mail CGI Professional Edition 3.2.3 and earlier allows remote authenticated administrators to read arbitrary files via unspecified vectors...

PT-2016-4647

Name of the Vulnerable Software and Affected Versions futomi MP Form Mail CGI Professional Edition versions 3.2.3 and earlier Description A directory traversal issue allows remote authenticated administrators to read arbitrary files. The estimated number of potentially affected devices worldwide ...

CVE-2015-0898

The CVE concerns Futomi CGI Cafe MP Form Mail CGI eCommerce edition running on Windows. The vulnerability allows a remote attacker to execute arbitrary Perl code due to an injection flaw in the CGI eCommerce implementation, affecting version 2.0.11 and earlier. The impact is remote code execution...

PT-2015-4953

Name of the Vulnerable Software and Affected Versions futomi CGI Cafe MP Form Mail CGI eCommerce versions prior to 2.0.12 Description The issue allows remote attackers to execute arbitrary Perl code. Recommendations For versions prior to 2.0.12, update to version 2.0.12 or later to resolve the...

CVE-2015-0898: Improper Control of Generation of Code

futomi CGI Cafe MP Form Mail CGI eCommerce before 2.0.12 on Windows allows remote attackers to execute arbitrary Perl code via unspecified vectors...

MP Form Mail CGI eCommerce edition vulnerable to code injection

Overview MP Form Mail CGI eCommerce edition provided by futomi Co., Ltd. is a CGI used to send mail from a web form. MP Form Mail CGI eCommerce edition contains a code injection vulnerability. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Informatio...

CVE-2009-0962: Undefined Security Weakness

Unspecified vulnerability in Futomi's CGI Cafe MP Form Mail CGI eCommerce 1.3.0 and earlier, and CGI Professional 3.2.2 and earlier, allows remote attackers to gain administrative privileges via unknown attack vectors...