Show filters
16 Total Results
Displaying 1-10 of 16
Sort by:
Attacker Value
Unknown
CVE-2023-40599
Disclosure Date: August 25, 2023 (last updated February 25, 2025)
Regular expression Denial-of-Service (ReDoS) exists in multiple add-ons for Mailform Pro CGI 4.3.1.3 and earlier, which allows a remote unauthenticated attacker to cause a denial-of-service condition. Affected add-ons are as follows: call/call.js, prefcodeadv/search.cgi, estimate/estimate.js, search/search.js, suggest/suggest.js, and coupon/coupon.js.
0
Attacker Value
Unknown
CVE-2023-32610
Disclosure Date: June 29, 2023 (last updated February 25, 2025)
Mailform Pro CGI 4.3.1.2 and earlier allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition.
0
Attacker Value
Unknown
CVE-2023-27507
Disclosure Date: May 23, 2023 (last updated February 25, 2025)
MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it.
0
Attacker Value
Unknown
CVE-2023-27397
Disclosure Date: May 23, 2023 (last updated February 25, 2025)
Unrestricted upload of file with dangerous type exists in MicroEngine Mailform version 1.1.0 to 1.1.8. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it.
0
Attacker Value
Unknown
CVE-2022-38400
Disclosure Date: September 08, 2022 (last updated February 24, 2025)
Mailform Pro CGI 4.3.1 and earlier allow a remote unauthenticated attacker to obtain the user input data by having a use of the product to access a specially crafted URL.
0
Attacker Value
Unknown
CVE-2022-22142
Disclosure Date: February 08, 2022 (last updated February 23, 2025)
Reflected cross-site scripting vulnerability in the checkbox of php_mailform versions prior to Version 1.40 allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors.
0
Attacker Value
Unknown
CVE-2022-21805
Disclosure Date: February 08, 2022 (last updated February 23, 2025)
Reflected cross-site scripting vulnerability in the attached file name of php_mailform versions prior to Version 1.40 allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors.
0
Attacker Value
Unknown
CVE-2021-20723
Disclosure Date: May 24, 2021 (last updated February 22, 2025)
Reflected cross-site scripting vulnerability in [MailForm01] free edition (versions which the last updated date listed at the top of descriptions in the program file is from 2014 December 12 to 2018 July 27) allows a remote attacker to inject an arbitrary script via unspecified vectors.
0
Attacker Value
Unknown
CVE-2020-5553
Disclosure Date: March 25, 2020 (last updated February 21, 2025)
mailform version 1.04 allows remote attackers to execute arbitrary PHP code via unspecified vectors.
0
Attacker Value
Unknown
CVE-2020-5552
Disclosure Date: March 25, 2020 (last updated February 21, 2025)
Cross-site scripting vulnerability in mailform version 1.04 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
0
