GCVE - cpe:2.3:a:jqueryform:jqueryform:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jqueryform:jqueryform:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Jqueryform (`d08c9664-94a6-53db-a04f-0d3cb56e0bf0`)
Product	Jqueryform (`325f803e-5667-5a66-a88f-6c27ca8b831d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-24985`	vulnerable	2026-06-08 05:41:45.045110	Details available Forms generated by JQueryForm.com before 2022-02-05 allows a remote authenticated attacker to bypass authentication and access the administrative section of other forms hosted on the same web server. This is relevant only when an organization hosts more than one of these forms on their server. Published: 2022-02-16T21:05:25.000Z Updated: 2024-08-03T04:29:01.571Z Open on db.gcve.eu Reference links https://JQueryForm.com https://www.nou-systems.com/cyber-security https://gist.github.com/pb-nsi/4d0a1ede76d4e97083b3435f820bf560	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-24984`	vulnerable	2026-06-08 05:41:45.044807	Details available Forms generated by JQueryForm.com before 2022-02-05 (if file-upload capability is enabled) allow remote unauthenticated attackers to upload executable files and achieve remote code execution. This occurs because file-extension checks occur on the client side, and because not all executable content (e.g., .phtml or .php.bak) is blocked. Published: 2022-02-16T21:05:03.000Z Updated: 2024-08-03T04:29:01.446Z Open on db.gcve.eu Reference links https://JQueryForm.com https://www.nou-systems.com/cyber-security https://gist.github.com/pb-nsi/4d0a1ede76d4e97083b3435f820bf560	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-24983`	vulnerable	2026-06-08 05:41:45.044495	Details available Forms generated by JQueryForm.com before 2022-02-05 allow remote attackers to obtain the URI to any uploaded file by capturing the POST response. When chained with CVE-2022-24984, this could lead to unauthenticated remote code execution on the underlying web server. This occurs because the Unique ID field is contained in the POST response upon submitting a form. Published: 2022-02-16T21:04:34.000Z Updated: 2024-08-03T04:29:01.655Z Open on db.gcve.eu Reference links https://JQueryForm.com https://www.nou-systems.com/cyber-security https://gist.github.com/pb-nsi/4d0a1ede76d4e97083b3435f820bf560	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-24982`	vulnerable	2026-06-08 05:41:45.044147	Details available Forms generated by JQueryForm.com before 2022-02-05 allows a remote authenticated attacker to access the cleartext credentials of all other form users. admin.php contains a hidden base64-encoded string with these credentials. Published: 2022-02-16T21:04:02.000Z Updated: 2024-08-03T04:29:01.597Z Open on db.gcve.eu Reference links https://JQueryForm.com https://www.nou-systems.com/cyber-security https://gist.github.com/pb-nsi/4d0a1ede76d4e97083b3435f820bf560	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-24981`	vulnerable	2026-06-08 05:41:45.043541	Details available A reflected cross-site scripting (XSS) vulnerability in forms generated by JQueryForm.com before 2022-02-05 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter to admin.php. Published: 2022-02-16T21:03:40.000Z Updated: 2024-08-03T04:29:01.461Z Open on db.gcve.eu Reference links https://JQueryForm.com https://www.nou-systems.com/cyber-security https://gist.github.com/pb-nsi/4d0a1ede76d4e97083b3435f820bf560	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.