CVE-2024-37764

MachForm up to version 19 is affected by an authenticated stored cross-site scripting...

CVE-2024-37764

MachForm up to version 19 is affected by an authenticated stored cross-site scripting...

CVE-2024-37762

MachForm up to version 21 is affected by an authenticated unrestricted file upload which leads to a remote code execution...

CVE-2024-37762

MachForm up to version 21 is affected by an authenticated unrestricted file upload which leads to a remote code execution...

Exploit for SQL Injection in Machform

Description MachForm up to version 19 is affected by an authen...

Machform Security Vulnerabilities

Machform is an online questionnaire program. A security vulnerability exists in Machform version 19 and prior versions that stems from the presence of an unauthenticated stored cross-site scripting vulnerability...

CVE-2024-37762

MachForm up to version 21 is affected by an authenticated unrestricted file upload which leads to a remote code execution...

CVE-2024-37765

Machform versions up to v19 are vulnerable to an authenticated Blind SQL injection located on the user account settings page (my_account.php). The root cause is the improper neutralization of special elements in the _user_admin_theme parameter, allowing an attacker to inject SQL queries. Exploita...

PT-2024-27737 · Machform · Machform

Name of the Vulnerable Software and Affected Versions: Machform versions prior to 20 Description: The issue is related to an authenticated Blind SQL injection in the user account settings page. Recommendations: For versions prior to 20, update to version 20 or later to resolve the issue...

PT-2024-27736 · Machform · Machform

Name of the Vulnerable Software and Affected Versions: MachForm versions prior to 20 Description: The issue is an authenticated stored cross-site scripting problem. Recommendations: For versions prior to 20, update to version 20 or later to resolve the issue...

CVE-2024-37764

MachForm versions up to 19 are vulnerable to an authenticated stored cross-site scripting (XSS) flaw. The root cause is the improper neutralization of input during web page generation, specifically due to a lack of validation or sanitization for POST request parameters in the https:///save_form.p...

CVE-2024-37763

MachForm versions up to v19 are vulnerable to an unauthenticated stored cross-site scripting (XSS) flaw. The root cause is a lack of input sanitization in the body of a POST request when using a form with the text signature enabled. A malicious payload can be injected into dynamic parameters such...

CVE-2024-37765: Improper Neutralization of Special Elements used in an SQL Command

Machform up to version 19 is affected by an authenticated Blind SQL injection in the user account settings page...

CVE-2024-37763: Improper Neutralization of Input During Web Page Generation

MachForm up to version 19 is affected by an unauthenticated stored cross-site scripting which affects users with valid sessions whom can view compiled forms results...

CVE-2024-37764

MachForm up to version 19 is affected by an authenticated stored cross-site scripting...

CVE-2024-37763

MachForm up to version 19 is affected by an unauthenticated stored cross-site scripting which affects users with valid sessions whom can view compiled forms results...

CVE-2024-37764: Improper Neutralization of Input During Web Page Generation

MachForm up to version 19 is affected by an authenticated stored cross-site scripting...

PT-2024-27735 · Machform · Machform

Name of the Vulnerable Software and Affected Versions: MachForm versions up to 19 Description: The issue is an unauthenticated stored cross-site scripting that affects users with valid sessions who can view compiled forms results. Recommendations: For versions up to 19, update to a version that...

Machform Security Vulnerabilities

Machform is an online questionnaire program. A security vulnerability exists in Machform version 19 and earlier, which stems from the presence of a validated stored cross-site scripting vulnerability...

Machform Security Vulnerabilities

Machform is an online questionnaire program. A security vulnerability exists in Machform version 19 and prior versions that originates from an authenticated blind SQL injection in the user account settings page...