Lucene search
+L

149 matches found

CNVD
CNVD
added 2020/03/25 12:0 a.m.2 views

keitai-site.net mailform code injection vulnerability

keitai-site.net mailform is a mail form plugin written in PHP. A code injection vulnerability exists in keitai-site.net mailform version 1.04. A remote attacker can exploit this vulnerability to execute arbitrary PHP code...

10CVSS8.1AI score0.02274EPSS
SaveExploits0
CNVD
CNVD
added 2020/03/25 12:0 a.m.3 views

keitai-site.net mailform cross-site scripting vulnerability

keitai-site.net mailform is a mail form plugin written in PHP. A cross-site scripting vulnerability exists in keitai-site.net mailform version 1.04. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

6.1CVSS6.2AI score0.00773EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2020/03/24 9:5 a.m.2 views

mailform vulnerable to cross-site scripting

Overview mailform provided by keitai-site.net is a PHP script providing mail form functions to a website. mailform contains a stored cross-site scripting vulnerability CWE-79. During the meeting of Committee for authorizing the disclosure of unresolved vulnerabilities held on January 16, 2020, it...

6.1CVSS6AI score0.00773EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2020/03/24 8:59 a.m.4 views

mailform vulnerable to PHP code execution

Overview mailform provided by keitai-site.net is a PHP script providing a mail form function to a website. mailform contains a PHP code execution vulnerability CWE-94 on the server where the product is running. During the meeting of Committee for authorizing the disclosure of unresolved...

10CVSS7.4AI score0.02274EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2020/03/24 12:0 a.m.78 views

JVN#77634892: mailform vulnerable to PHP code execution

mailform provided by keitai-site.net is a PHP script providing a mail form function to a website. mailform contains a PHP code execution vulnerability CWE-94 on the server where the product is running. Impact Arbitrary PHP code may be executed on the server where the product is running. Solution...

10CVSS9.7AI score0.02274EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2020/03/24 12:0 a.m.75 views

JVN#85942151: mailform vulnerable to cross-site scripting

mailform provided by keitai-site.net is a PHP script providing mail form functions to a website. mailform contains a stored cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the web browser of an administrator who is accessing a website using mailform...

6.1CVSS6AI score0.00773EPSS
SaveExploits0
CNVD
CNVD
added 2018/08/01 12:0 a.m.9 views

Foxit Reader Type Obfuscation Remote Code Execution Vulnerability (CNVD-2018-15071)

Foxit Reader old name: Foxit PDF Reader is a set of software used to read PDF format files, by Fujian Foxit Software developed by Foxit Reader is a set of free to use the software, the operating system is mainly based on Microsoft Windows, and as long as there is a Win32 implementation of the...

8.8CVSS8.8AI score0.02773EPSS
SaveExploits0References1
OSV
OSV
added 2018/07/31 8:29 p.m.5 views

CVE-2018-14268

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.2AI score0.02773EPSS
SaveExploits0References2
Talos
Talos
added 2018/07/19 12:0 a.m.77 views

Foxit PDF Reader Javascript MailForm Remote Code Execution Vulnerability

Summary An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader version 9.1.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to tri...

8.8CVSS8.5AI score0.4414EPSS
SaveExploits1
Openbugbounty
Openbugbounty
added 2017/10/13 2:35 a.m.15 views

frutigergeschlechter.ch XSS vulnerability

Vulnerable URL: http://www.frutigergeschlechter.ch/humo-gen/mailform.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated...

6.3AI score
SaveExploits0
NVD
NVD
added 2015/02/27 2:59 a.m.20 views

CVE-2015-0883

SYNCK GRAPHICA Mailform Pro CGI 4.1.4 and 4.1.5, when the mailauth module is enabled, does not properly send e-mail messages, which allows remote attackers to execute arbitrary code via unspecified vectors...

6.8CVSS7.8AI score0.02293EPSS
SaveExploits0References4
Prion
Prion
added 2015/02/27 2:59 a.m.15 views

Code injection

SYNCK GRAPHICA Mailform Pro CGI 4.1.4 and 4.1.5, when the mailauth module is enabled, does not properly send e-mail messages, which allows remote attackers to execute arbitrary code via unspecified vectors...

6.8CVSS8.3AI score0.02293EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2015/02/27 2:0 a.m.46 views

CVE-2015-0883

SYNCK GRAPHICA Mailform Pro CGI (4.1.4–4.1.5) is vulnerable when the MailAuth module is enabled. A flaw in the email sending process allows remote attackers to execute arbitrary code on the server. Affected component: Mailform Pro CGI’s mail sending path (MailAuth-enabled). Impact: remote arbitra...

6.8CVSS8AI score0.02293EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2015/02/27 2:0 a.m.20 views

CVE-2015-0883

SYNCK GRAPHICA Mailform Pro CGI 4.1.4 and 4.1.5, when the mailauth module is enabled, does not properly send e-mail messages, which allows remote attackers to execute arbitrary code via unspecified vectors...

7.8AI score0.02293EPSS
SaveExploits0References4
CNVD
CNVD
added 2015/02/26 12:0 a.m.6 views

SYNCK GRAPHICA Mailform Pro Remote Code Execution Vulnerability

Mailform Pro CGI is a mail form application. A security vulnerability exists in Mailform Pro CGI's handling of email delivery, which allows remote attackers to exploit the vulnerability to execute arbitrary code...

6.8CVSS7.5AI score0.02293EPSS
SaveExploits0References1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2015/02/25 6:0 a.m.6 views

SYNCK GRAPHICA Mailform Pro CGI vulnerable to remote code execution

Overview Mailform Pro CGI provided by SYNCK GRAPHICA contains a flaw in the process of sending emails, which may result in an arbitrary code execution. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership...

6.8CVSS7.5AI score0.02293EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2015/02/25 12:0 a.m.35 views

JVN#30135729: SYNCK GRAPHICA Mailform Pro CGI vulnerable to remote code execution

Mailform Pro CGI provided by SYNCK GRAPHICA contains a flaw in the process of sending emails, which may result in an arbitrary code execution. Impact Arbitrary code may be executed on the server. Solution Update the Software Update to the latest version according to the information provided by th...

6.8CVSS6.6AI score0.02293EPSS
SaveExploits0
NVD
NVD
added 2014/07/20 11:12 a.m.21 views

CVE-2014-3894

Cross-site scripting XSS vulnerability in PHP Kobo Multifunctional MailForm Free 2014/1/28 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer header...

4.3CVSS5.8AI score0.00931EPSS
SaveExploits0References2
Prion
Prion
added 2014/07/20 11:12 a.m.18 views

Cross site scripting

Cross-site scripting XSS vulnerability in PHP Kobo Multifunctional MailForm Free 2014/1/28 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer header...

4.3CVSS6.2AI score0.00931EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2014/07/20 10:0 a.m.26 views

CVE-2014-3894

Cross-site scripting XSS vulnerability in PHP Kobo Multifunctional MailForm Free 2014/1/28 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer header...

5.8AI score0.00931EPSS
SaveExploits0References2
Rows per page
Query Builder