CVE-2021-38145

An issue was discovered in Form Tools through 3.0.20. SQL Injection can occur via the exportgroupid field when a low-privileged user client tries to export a form with data, e.g., manipulation of modules/exportmanager/export.php?exportgroupid=1&exportgroup1results=all&exporttypeid=1...

PT-2021-21965

Name of the Vulnerable Software and Affected Versions: Form Tools versions 3.0.20 and earlier Description: An issue allows SQL Injection to occur via the export group id field when a low-privileged user tries to export a form with data. This can be achieved through manipulation of the...

Form Tools SQL注入漏洞

Form Tools is an open source code base for Form Tools scripts, modules, themes and APIs. A SQL injection vulnerability exists in Form Tools that stems from an issue found in Form Tools starting from 3.0.20. When a low-privileged user client-side attempts to export a form containing data, for...