Mailform Pro Cgi Security Vulnerabilities and Issues — Mailform Pro Cgi CVE List

Lucene search

Synck GraphicaMailform Pro Cgi

5 matches found

CVE•added 2023/08/25 3:15 a.m.•41 views

CVE-2023-40599

Regular expression Denial-of-Service (ReDoS) exists in multiple add-ons for Mailform Pro CGI 4.3.1.3 and earlier, which allows a remote unauthenticated attacker to cause a denial-of-service condition. Affected add-ons are as follows: call/call.js, prefcodeadv/search.cgi, estimate/estimate.js, searc...

7.5CVSS7.5AI score0.00541EPSS

CVE•added 2025/05/26 7:15 a.m.•38 views

CVE-2025-41441

Mailform Pro CGI prior to 4.3.4 generates error messages containing sensitive information, which may allow a remote unauthenticated attacker to obtain coupon codes. This vulnerability only affects products that use the coupon feature.

6.3CVSS4.2AI score0.00042EPSS

CVE•added 2022/09/08 8:15 a.m.•35 views

CVE-2022-38400

Mailform Pro CGI 4.3.1 and earlier allow a remote unauthenticated attacker to obtain the user input data by having a use of the product to access a specially crafted URL.

5.9CVSS5.7AI score0.00281EPSS

CVE•added 2015/02/27 2:59 a.m.•30 views

CVE-2015-0883

SYNCK GRAPHICA Mailform Pro CGI 4.1.4 and 4.1.5, when the mailauth module is enabled, does not properly send e-mail messages, which allows remote attackers to execute arbitrary code via unspecified vectors.

6.8CVSS8AI score0.01581EPSS

CVE•added 2023/06/29 1:15 a.m.•23 views

CVE-2023-32610

Mailform Pro CGI 4.3.1.2 and earlier allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition.

7.5CVSS7.5AI score0.00529EPSS