cve-2024-37765

Description MachForm jusqu'à la version 19 est affecté par une injection SQL aveugle authentifiée dans la page des paramètres du compte utilisateur. Les attaques par injection SQL consistent à insérer des requêtes SQL via l'utilisation d'un champ de données d'entrée provenant de l'application...

cve-2024-37763

설명 MachForm 버전 19까지는 인증되지 않은 저장형 크로스 사이트 스크립팅XSS의 영향을 받으며, 이는 컴파일된 양식 결과를 볼 수 있는 유효한 세션을 가진 사용자에게 영향을 미칩니다. 대상 웹 애플리케이션에서 텍스트 서명이 활성화된 양식을 사용할 때, 취약한 리소스에 대한 요청이 XSS 공격에 취약한 것으로 확인되었습니다. 취약한 URL 내 POST 요청 본문의 매개변수는 위생 처리가 부족하여, 악성 페이로드가 삽입되고 피해자 브라우저에서 JavaScript 코드가 실행될 수 있습니다. 위험 심각도: 중간 CVSS...

cve-2024-37762

Description MachForm jusqu'à la version 21 est affecté par un téléchargement de fichier non restreint authentifié qui conduit à une exécution de code à distance. L'application offre la possibilité de créer un formulaire avec une fonctionnalité de téléchargement de fichier. Bien que par défaut les...

cve-2024-37764

Описание MachForm до версии 19 подвержен аутентифицированному сохраненному межсайтовому скриптингу XSS. В целевом веб-приложении запрос к уязвимому ресурсу был признан подверженным XSS-атаке. Параметры POST-запроса в теле уязвимого URL-адреса не проходят санитацию, что позволяет внедрить...

EUVD-2018-18167

Malware in sbrugna...

EUVD-2013-4794

Malware in sbrugna...

EUVD-2013-4792

Malware in sbrugna...

EUVD-2013-4793

Malware in sbrugna...

EUVD-2021-7559

Malicious code in bioql PyPI...

EUVD-2021-7558

Malicious code in bioql PyPI...

EUVD-2025-3837

Malicious code in bioql PyPI...

EUVD-2021-7561

Malicious code in bioql PyPI...

EUVD-2021-7562

Malicious code in bioql PyPI...

CVE-2024-37763

MachForm up to version 19 is affected by an unauthenticated stored cross-site scripting which affects users with valid sessions whom can view compiled forms results...

CVE-2024-37764

MachForm up to version 19 is affected by an authenticated stored cross-site scripting...

CVE-2024-37762

MachForm up to version 21 is affected by an authenticated unrestricted file upload which leads to a remote code execution...

CVE-2024-37765

Machform up to version 19 is affected by an authenticated Blind SQL injection in the user account settings page...

CVE-2021-20105

Machform prior to version 16 is vulnerable to an open redirect in Safariinit.php due to an improperly sanitized 'ref' parameter...

CVE-2021-20103

Machform prior to version 16 is vulnerable to stored cross-site scripting due to insufficient sanitization of file attachments uploaded with forms through upload.php...

CVE-2021-20101

Machform prior to version 16 is vulnerable to HTTP host header injection due to improperly validated host headers. This could cause a victim to receive malformed content...