43 matches found
CVE-2026-78839
CVE-2026-78839 Descripción Una vulnerabilidad de carga arbitraria de archivos en AppNitro MachForm v30 permite a los atacantes ejecutar código arbitrario mediante la carga de un archivo .phar manipulado. La explotación exitosa de este problema requiere dos salvedades prácticas. Primero, un atacan...
CVE-2026-78837
CVE-2026-78837 Descripción Una vulnerabilidad de inyección SQL en el parámetro apformid en AppNitro MachForm v30 permite a los atacantes acceder a información sensible de la base de datos mediante una declaración SQL manipulada. Componente afectado Probado en MachForm - Versión 30 Tipo de ataque...
CVE-2026-78837
A SQL injection vulnerability in the apformid parameter in AppNitro MachForm v30 allows attackers to access sensitive database information via a crafted SQL statement...
CVE-2026-78838
A reflected cross-site scripting XSS vulnerability in the griddatasource.php component of AppNitro MachForm v30 allows attackers to execute arbitrary Javascript in the context of the victim's browser via injecting a crafted payload into the filterfilters0field parameter...
CVE-2026-78837
AppNitro MachForm v30 is vulnerable to a remote SQL injection vulnerability in the ap_form_{id} parameter. An unauthenticated attacker can inject content into the filter[filters][0][field] parameter within grid_datasource.php to enumerate valid column names in the ap_form_{id} table. This allows ...
EUVD-2026-72851
A SQL injection vulnerability in the apformid parameter in AppNitro MachForm v30 allows attackers to access sensitive database information via a crafted SQL statement...
CVE-2026-78837
A SQL injection vulnerability in the apformid parameter in AppNitro MachForm v30 allows attackers to access sensitive database information via a crafted SQL statement...
CVE-2026-78838
A reflected cross-site scripting XSS vulnerability in the griddatasource.php component of AppNitro MachForm v30 allows attackers to execute arbitrary Javascript in the context of the victim's browser via injecting a crafted payload into the filterfilters0field parameter...
PT-2026-87099
A SQL injection vulnerability in the ap form id parameter in AppNitro MachForm v30 allows attackers to access sensitive database information via a crafted SQL statement...
CVE-2026-78838
A reflected cross-site scripting XSS vulnerability in the griddatasource.php component of AppNitro MachForm v30 allows attackers to execute arbitrary Javascript in the context of the victim's browser via injecting a crafted payload into the filterfilters0field parameter...
EUVD-2026-72775
A reflected cross-site scripting XSS vulnerability in the griddatasource.php component of AppNitro MachForm v30 allows attackers to execute arbitrary Javascript in the context of the victim's browser via injecting a crafted payload into the filterfilters0field parameter...
CVE-2026-78838
A reflected cross-site scripting (XSS) vulnerability exists in the grid_datasource.php component of AppNitro MachForm v30 . An unauthenticated attacker can execute arbitrary JavaScript in a victim's browser by injecting a crafted payload into the filter[filters][0][field] parameter. The vulnerabi...
PT-2026-87069
A reflected cross-site scripting XSS vulnerability in the grid datasource.php component of AppNitro MachForm v30 allows attackers to execute arbitrary Javascript in the context of the victim's browser via injecting a crafted payload into the filterfilters0field parameter...
CVE-2026-78839
An arbitrary file upload vulnerability in AppNitro MachForm v30 allows attackers to execute arbitrary code via uploading a crafted .phar file...
CVE-2026-78839
An arbitrary file upload vulnerability in AppNitro MachForm v30 allows attackers to execute arbitrary code via uploading a crafted .phar file...
EUVD-2026-71712
An arbitrary file upload vulnerability in AppNitro MachForm v30 allows attackers to execute arbitrary code via uploading a crafted .phar file...
CVE-2026-78839
AppNitro MachForm v30 is vulnerable to an arbitrary file upload vulnerability that enables remote code execution . An unauthenticated attacker can exploit this by uploading a crafted .phar file to a form that permits that extension. Successful exploitation requires the attacker to identify a form...
AppNitro MachForm 30 Cross Site Scripting
AppNitro MachForm version 30 suffers from a cross site scripting vulnerability. CVE-2026-78838 Description A reflected cross-site scripting XSS vulnerability in the griddatasource.php component of AppNitro MachForm v30 allows attackers to execute arbitrary Javascript in the context of the victim'...
AppNitro MachForm 30 Shell Upload
AppNitro MachForm version 30 suffers from a remote shell upload vulnerability. CVE-2026-78839 Description An arbitrary file upload vulnerability in AppNitro MachForm v30 allows attackers to execute arbitrary code via uploading a crafted .phar file. Successful exploitation of this issue requires t...