Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 12:15 p.m.5 views

CVE-2018-1000059

ValidFormBuilder version 4.5.4 contains a PHP Object Injection vulnerability in Valid Form unserialize method that can result in Possible to execute unauthorised system commands remotely and disclose file contents in file system...

9.8CVSS7.7AI score0.00266EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-1815

Malware in sbrugna...

9.8CVSS9.5AI score0.00266EPSS
Exploits0References2
CNVD
CNVD
added 2018/02/27 12:0 a.m.2 views

ValidFormBuilder PHP Object Injection Vulnerability

ValidForm Builder is an open source for creating Web forms and field validation of JavaScript and PHP libraries . A PHP object injection vulnerability exists in the Valid Form deserialization method in ValidFormBuilder version 4.5.4. A remote attacker can exploit this vulnerability to execute...

9.8CVSS7.8AI score0.00266EPSS
Exploits0References1
OSV
OSV
added 2018/02/09 11:29 p.m.11 views

CVE-2018-1000059

ValidFormBuilder version 4.5.4 contains a PHP Object Injection vulnerability in Valid Form unserialize method that can result in Possible to execute unauthorised system commands remotely and disclose file contents in file system...

9.8CVSS10AI score
Exploits0References1
NVD
NVD
added 2018/02/09 11:29 p.m.9 views

CVE-2018-1000059

ValidFormBuilder version 4.5.4 contains a PHP Object Injection vulnerability in Valid Form unserialize method that can result in Possible to execute unauthorised system commands remotely and disclose file contents in file system...

9.8CVSS9.8AI score0.00266EPSS
Exploits0References1
Prion
Prion
added 2018/02/09 11:29 p.m.10 views

Design/Logic Flaw

ValidFormBuilder version 4.5.4 contains a PHP Object Injection vulnerability in Valid Form unserialize method that can result in Possible to execute unauthorised system commands remotely and disclose file contents in file system...

7.5CVSS9.7AI score0.00266EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2018/02/09 11:0 p.m.40 views

CVE-2018-1000059

Summary: ValidFormBuilder 4.5.4 contains a PHP Object Injection vulnerability in the Valid Form unserialize method. The root cause is insecure deserialization, enabling possible remote command execution and disclosure of files. Affected product/version: ValidFormBuilder 4.5.4. Impact: unauthorise...

9.8CVSS9.7AI score0.00266EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2018/02/09 11:0 p.m.11 views

CVE-2018-1000059

ValidFormBuilder version 4.5.4 contains a PHP Object Injection vulnerability in Valid Form unserialize method that can result in Possible to execute unauthorised system commands remotely and disclose file contents in file system...

9.8AI score0.00266EPSS
Exploits0References1
Exploit DB
Exploit DB
added 2010/07/23 12:0 a.m.22 views

ValidForm Builder script - Remote Command Execution

Exploit Title: ValidForm Builder script Remote Command Execution Vulnerability Date: 2010/07/23 Author: HackeR aRaR Email: [email protected] My Sites : www.vbspiders.com Script home: http://www.phpgalleryscript.org download Script: http://validformbuilder.googlecode.com/files/validformbuilderv.1.0.z...

7.4AI score
Exploits0
Rows per page
Query Builder