11 matches found
CVE-2024-57765
MSFM before 2025.01.01 was discovered to contain a SQL injection vulnerability via the sname parameter at table/list...
CVE-2024-57767
MSFM before v2025.01.01 was discovered to contain a Server-Side Request Forgery SSRF via the component /file/download...
CVE-2024-57766
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/editField...
CVE-2024-57766
The permission management system Mysiteforme (MSFM) versions prior to 2025.01.01 are vulnerable to a fastjson deserialization vulnerability. The flaw is located within the system/table/editField component. This vulnerability, classified as CWE-502 , could allow for the execution of malicious code...
CVE-2024-57765
MSFM before 2025.01.01 was discovered to contain a SQL injection vulnerability via the sname parameter at table/list...
CVE-2024-57764
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/add...
CVE-2024-57763
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/addField...
CVE-2024-57767
MSFM before v2025.01.01 was discovered to contain a Server-Side Request Forgery SSRF via the component /file/download...
CVE-2024-57767
MSFM versions prior to v2025.01.01 are vulnerable to a Server-Side Request Forgery (SSRF) flaw located in the /file/download component. This vulnerability allows an attacker to perform unauthorized access to internal resources. To mitigate this risk, it is recommended to disable the /file/downloa...
PT-2025-3561 · Msfm · Msfm
Name of the Vulnerable Software and Affected Versions: MSFM versions prior to v2025.01.01 Description: The issue is related to a Server-Side Request Forgery SSRF in MSFM, which occurs via the /file/download component. This allows for unauthorized access to internal resources. Recommendations: For...
