An issue exists in Appnitro MachForm prior to 4.2.3. When the form is set to filter a blacklist, it automatically adds dangerous extensions to the filters. If the filter is set to a whitelist, the dangerous extensions can be bypassed through ap_form_elements SQL Injection.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
machform machform 4.2.3 |