184 matches found
CVE-2024-37764
MachForm up to version 19 is affected by an authenticated stored cross-site scripting...
CVE-2024-37764
MachForm up to version 19 is affected by an authenticated stored cross-site scripting...
CVE-2024-37762
MachForm up to version 21 is affected by an authenticated unrestricted file upload which leads to a remote code execution...
CVE-2024-37762
MachForm up to version 21 is affected by an authenticated unrestricted file upload which leads to a remote code execution...
Exploit for SQL Injection in Machform
Description MachForm up to version 19 is affected by an authen...
Machform Security Vulnerabilities
Machform is an online questionnaire program. A security vulnerability exists in Machform version 19 and prior versions that stems from the presence of an unauthenticated stored cross-site scripting vulnerability...
CVE-2024-37762
MachForm up to version 21 is affected by an authenticated unrestricted file upload which leads to a remote code execution...
CVE-2024-37765
Machform versions up to v19 are vulnerable to an authenticated Blind SQL injection located on the user account settings page (my_account.php). The root cause is the improper neutralization of special elements in the _user_admin_theme parameter, allowing an attacker to inject SQL queries. Exploita...
PT-2024-27737 · Machform · Machform
Name of the Vulnerable Software and Affected Versions: Machform versions prior to 20 Description: The issue is related to an authenticated Blind SQL injection in the user account settings page. Recommendations: For versions prior to 20, update to version 20 or later to resolve the issue...
CVE-2024-37764
MachForm versions up to 19 are vulnerable to an authenticated stored cross-site scripting (XSS) flaw. The root cause is the improper neutralization of input during web page generation, specifically due to a lack of validation or sanitization for POST request parameters in the https:///save_form.p...
PT-2024-27736 · Machform · Machform
Name of the Vulnerable Software and Affected Versions: MachForm versions prior to 20 Description: The issue is an authenticated stored cross-site scripting problem. Recommendations: For versions prior to 20, update to version 20 or later to resolve the issue...
CVE-2024-37763
MachForm versions up to v19 are vulnerable to an unauthenticated stored cross-site scripting (XSS) flaw. The root cause is a lack of input sanitization in the body of a POST request when using a form with the text signature enabled. A malicious payload can be injected into dynamic parameters such...
CVE-2024-37765: Improper Neutralization of Special Elements used in an SQL Command
Machform up to version 19 is affected by an authenticated Blind SQL injection in the user account settings page...
CVE-2024-37763: Improper Neutralization of Input During Web Page Generation
MachForm up to version 19 is affected by an unauthenticated stored cross-site scripting which affects users with valid sessions whom can view compiled forms results...
CVE-2024-37764
MachForm up to version 19 is affected by an authenticated stored cross-site scripting...
CVE-2024-37763
MachForm up to version 19 is affected by an unauthenticated stored cross-site scripting which affects users with valid sessions whom can view compiled forms results...
CVE-2024-37762
MachForm up to version 21 is affected by an authenticated unrestricted file upload which leads to a remote code execution...
CVE-2024-37762: Unrestricted Upload of File with Dangerous Type
MachForm up to version 21 is affected by an authenticated unrestricted file upload which leads to a remote code execution...
CVE-2024-37762
MachForm versions up to v21 are vulnerable to an authenticated unrestricted file upload that can lead to remote code execution (RCE) . The root cause exists because the application allows form creators to specify additional allowed file formats beyond the default safe set. If a user with form cre...