CVE-2026-78837

AppNitro MachForm v30 is affected by a remote SQL injection vulnerability in the filter[filters][0][field] parameter of grid_datasource.php. An unauthenticated attacker can craft a SQL statement to enumerate valid column names in the ap_form_{id} table, gaining access to sensitive database inform...

EUVD-2026-72851

A SQL injection vulnerability in the apformid parameter in AppNitro MachForm v30 allows attackers to access sensitive database information via a crafted SQL statement...