PT-2022-15142

Name of the Vulnerable Software and Affected Versions php mailform versions prior to 1.40 Description A reflected cross-site scripting issue in the attached file name allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors. Recommendations For versions prior...

Multiple cross-site scripting vulnerabilities in php_mailform

Overview phpmailform provided by econosys system contains multiple cross-site scripting vulnerabilities listed below. Reflected cross-site scripting vulnerability regarding the checkbox CWE-79 - CVE-2022-22142 Reflected cross-site scripting vulnerability regarding the attached file name CWE-79 -...

Econosys System Php_Mailform 跨站脚本漏洞

Econosys System PhpMailform is a customizable open source Php mail form from Econosys System, Japan. A cross-site scripting vulnerability exists in econosys system phpmailform, which stems from insufficient cleanup of user-supplied data in attached filenames. A remote attacker could trick a victi...

CVE-2020-5552

Cross-site scripting vulnerability in mailform version 1.04 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2020-5553

mailform version 1.04 allows remote attackers to execute arbitrary PHP code via unspecified vectors...

CVE-2020-5552

Cross-site scripting vulnerability in mailform version 1.04 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2020-5553

mailform version 1.04 allows remote attackers to execute arbitrary PHP code via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in mailform version 1.04 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2020-5552

Cross-site scripting vulnerability in mailform version 1.04 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2020-5553

mailform version 1.04 allows remote attackers to execute arbitrary PHP code via unspecified vectors...

CVE-2020-5552

Cross-site scripting vulnerability in mailform version 1.04 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2020-5553

mailform version 1.04 allows remote attackers to execute arbitrary PHP code via unspecified vectors...

CVE-2020-5552

CVE-2020-5552 concerns the mailform PHP script by keitai-site.net, specifically version 1.04. The connected sources describe a stored cross-site scripting (CWE-79) vulnerability that can inject arbitrary script or HTML, potentially executing in the administrator’s browser when they access a site ...

CVE-2020-5553

CVE-2020-5553 affects mailform version 1.04 (keitai-site.net) and is a PHP script that allows remote arbitrary PHP code execution on the server. Root cause is a PHP code execution vulnerability (CWE-94); impact is remote compromise of confidentiality, integrity, and availability as described in t...

keitai-site.net mailform code injection vulnerability

keitai-site.net mailform is a mail form plugin written in PHP. A code injection vulnerability exists in keitai-site.net mailform version 1.04. A remote attacker can exploit this vulnerability to execute arbitrary PHP code...

keitai-site.net mailform cross-site scripting vulnerability

keitai-site.net mailform is a mail form plugin written in PHP. A cross-site scripting vulnerability exists in keitai-site.net mailform version 1.04. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

PT-2020-18528

Name of the Vulnerable Software and Affected Versions mailform version 1.04 Description The issue allows remote attackers to execute arbitrary PHP code. Recommendations For mailform version 1.04, at the moment, there is no information about a newer version that contains a fix for this issue...

PT-2020-18527

Name of the Vulnerable Software and Affected Versions mailform version 1.04 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to cross-site scripting. Recommendations For mailform version 1.04, consider disabling the featu...

CVE-2020-5553: Improper Control of Generation of Code

mailform version 1.04 allows remote attackers to execute arbitrary PHP code via unspecified vectors...

CVE-2020-5552: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in mailform version 1.04 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...