a-form vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv2

SQL injection vulnerability in index.php in the Phil-a-Form (com_philaform) 1.2.0.0 and previous versions component for Joomla! allows remote malicious users to execute arbitrary SQL commands via the form_id parameter.

Phil-a-form Phil-a-form 1.2.0.0

1 EDB exploit

NA

Cross-site scripting vulnerability in Movable Type plugin A-Form versions before 4.1.1 (for Movable Type 7 Series) and versions before 3.9.1 (for Movable Type 6 Series) allows a remote unauthenticated malicious user to inject an arbitrary script.

Ark-web A-form

5.5

CVSSv2

The A-Form and A-Form bamboo prior to 1.3.6 and 2.x prior to 2.0.3, and A-Form PC and PC/Mobile prior to 3.1, plug-ins for Movable Type do not require administrative authentication, which allows remote authenticated users to modify data via unspecified vectors.

Ark-web A-form Ark-web A-form 2.0.2 Ark-web A-form Pc Ark-web A-form Pc Mobile Ark-web A-form Bamboo 2.0.2 Ark-web A-form Bamboo 1.3.5

6.8

CVSSv2

Multiple cross-site request forgery (CSRF) vulnerabilities in the Contact Form Generator plugin 2.0.1 and previous versions for WordPress allow remote malicious users to hijack the authentication of administrators for requests that (1) create a field, (2) update a field, (3) dele...

Creative-solutions Contact Form Generator

1 EDB exploit

4.3

CVSSv2

The mail message display page in SquirrelMail up to and including 1.4.22 has XSS via a "<form action='data:text" attack.

Squirrelmail Squirrelmail

4.3

CVSSv2

There is a cross-site scripting vulnerability in django-epiceditor 0.2.3 via crafted content in a form field.

Django-epiceditor Project Django-epiceditor 0.2.3

5

CVSSv2

The dansie shopping cart application cart.pl allows remote malicious users to execute commands via a shell metacharacters in a form variable.

Craig Dansie Dansie Shopping Cart 3.0.4

NA

Jenkins Fortify Plugin 22.1.38 and previous versions does not escape the error message for a form validation method, resulting in an HTML injection vulnerability.

Jenkins Fortify

4.6

CVSSv2

join.cfm in e-Zone Media Fuse Talk allows a local user to execute arbitrary SQL code via a semi-colon (;) in a form variable.

E-zone Media Fuse Talk

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook