Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:appnitro_machform:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductAppnitro Machform (0fa2e1e0-91d3-5107-b24c-26625cff0e40)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-20105 vulnerable 2026-06-08 05:29:08.461729 Details available
Machform prior to version 16 is vulnerable to an open redirect in Safari_init.php due to an improperly sanitized 'ref' parameter.
Published: 2021-06-29T15:37:41.000Z
Updated: 2024-08-03T17:30:07.572Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20104 vulnerable 2026-06-08 05:29:08.461453 Details available
Machform prior to version 16 is vulnerable to unauthenticated remote code execution due to insufficient sanitization of file attachments uploaded with forms through upload.php.
Published: 2021-06-29T15:31:01.000Z
Updated: 2024-08-03T17:30:07.637Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20103 vulnerable 2026-06-08 05:29:08.461069 Details available
Machform prior to version 16 is vulnerable to stored cross-site scripting due to insufficient sanitization of file attachments uploaded with forms through upload.php.
Published: 2021-06-29T15:30:51.000Z
Updated: 2024-08-03T17:30:07.450Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20102 vulnerable 2026-06-08 05:29:08.460765 Details available
Machform prior to version 16 is vulnerable to cross-site request forgery due to a lack of CSRF tokens in place.
Published: 2021-06-29T15:30:45.000Z
Updated: 2024-08-03T17:30:07.598Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20101 vulnerable 2026-06-08 05:29:08.459732 Details available
Machform prior to version 16 is vulnerable to HTTP host header injection due to improperly validated host headers. This could cause a victim to receive malformed content.
Published: 2021-06-29T15:30:39.000Z
Updated: 2024-08-03T17:30:07.625Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.