49 matches found
CVE-2026-2470: Incorrect Authorization
The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to, and including, 2.0.9. This is due to the pagelayersavecontent AJAX handler allowing users with basic post-edit capability to persist...
EUVD-2015-0907
Malware in sbrugna...
EUVD-2016-2313
Malware in sbrugna...
EUVD-2005-0679
Malware in sbrugna...
CVE-2018-0514
MP Form Mail CGI eCommerce Edition Ver 2.0.13 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors...
CVE-2018-0514
MP Form Mail CGI eCommerce Edition (futomi Co., Ltd.) is vulnerable to OS command injection (CWE-78). Affected: Ver 2.0.13 and earlier. Impact: remote attacker may execute arbitrary OS commands. Root cause: OS command injection in the CGI that handles web form mail. Remediation: update to the lat...
CVE-2018-0514
MP Form Mail CGI eCommerce Edition Ver 2.0.13 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors...
MP Form Mail CGI eCommerce Edition vulnerable to OS command injection
Overview MP Form Mail CGI eCommerce Edition provided by futomi Co., Ltd. is a CGI used to send mail from a web form. MP Form Mail CGI eCommerce Edition contains an OS command injection vulnerability CWE-78. Daiki Ichinose of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA...
CVE-2018-0514: Improper Neutralization of Special Elements used in an OS Command
MP Form Mail CGI eCommerce Edition Ver 2.0.13 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors...
PT-2018-8873
Name of the Vulnerable Software and Affected Versions MP Form Mail CGI eCommerce Edition versions 2.0.13 and earlier Description The issue allows remote attackers to execute arbitrary OS commands. Recommendations For MP Form Mail CGI eCommerce Edition versions 2.0.13 and earlier, update to a...
CVE-2016-1212
Directory traversal vulnerability in futomi MP Form Mail CGI Professional Edition 3.2.3 and earlier allows remote authenticated administrators to read arbitrary files via unspecified vectors...
CVE-2016-1212
Directory traversal vulnerability in futomi MP Form Mail CGI Professional Edition 3.2.3 and earlier allows remote authenticated administrators to read arbitrary files via unspecified vectors...
CVE-2016-1212
CVE-2016-1212 affects Futomi MP Form Mail CGI Professional Edition up to version 3.2.3, exposing a directory traversal vulnerability (CWE-22). The flaw allows remote authenticated administrators to read arbitrary files on the server via unspecified vectors. Public records from NVD/JVN describe th...
CVE-2016-1212
Directory traversal vulnerability in futomi MP Form Mail CGI Professional Edition 3.2.3 and earlier allows remote authenticated administrators to read arbitrary files via unspecified vectors...
CVE-2016-1212: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in futomi MP Form Mail CGI Professional Edition 3.2.3 and earlier allows remote authenticated administrators to read arbitrary files via unspecified vectors...
PT-2016-4647
Name of the Vulnerable Software and Affected Versions futomi MP Form Mail CGI Professional Edition versions 3.2.3 and earlier Description A directory traversal issue allows remote authenticated administrators to read arbitrary files. The estimated number of potentially affected devices worldwide ...
Futomi MP Form Mail CGI Professional Edition Directory Traversal Vulnerability
Futomi MP Form Mail CGI Professional Edition is a suite of software that sends mail in the form of CGI to a specified E-mail from Futomi, Japan. A directory traversal vulnerability exists in Futomi MP Form Mail CGI Professional Edition 3.2.3 and earlier versions. An attacker can exploit this...
MP Form Mail CGI Professional Edition vulnerable to directory traversal
Overview MP Form Mail CGI Professional Edition provided by futomi Co., Ltd. contains a directory traversal vulnerability CWE-22. Yuuta Watanabe of STNet, Incorporated reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership...
Futomi CGI Cafe MP Form Mail CGI eCommerce Arbitrary Code Execution Vulnerability
Futomi CGI Cafe MP Form Mail CGI eCommerce on Windows is a Windows-based CGI for sending emails from Web forms by Futomi Japan. A security vulnerability exists in Futomi CGI Cafe MP Form Mail CGI eCommerce on Windows platform prior to version 2.0.12. A remote attacker can exploit the vulnerabilit...