Appnitro MachForm < 4.2.3 Multiple Vulnerabilities

Appnitro MachForm is prone to multiple vulnerabilities. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...

CVE-2018-6410

creationtimestamp| type| source ---|---|--- 2018-05-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44804...

CVE-2018-6410

Appnitro MachForm before 4.2.3 is affected by a download.php SQL injection via the q parameter. Public sources (NVD/NVD mirrors, Exploit-DB) describe exploitation and related path traversal/upload bypass via this vulnerability, with exploits available (e.g., Exploit-DB 44804). The issue is addres...