MachForm 4.2.3
Approved changes feed: RSS · Atom
cpe:2.3:a:machform:machform:4.2.3:*:*:*:*:*:*:*part: a version: 4.2.3 update: *
| Vendor | Machform (50ecc5a5-cdc9-5eb1-b36a-3c23138bc3a4) |
|---|---|
| Product | Machform (1958aa84-36a5-5196-a3f8-17120d99be4c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-6411 |
vulnerable | 2026-06-08 05:11:53.708749 |
Details available
An issue was discovered in Appnitro MachForm before 4.2.3. When the form is set to filter a blacklist, it automatically adds dangerous extensions to the filters. If the filter is set to a whitelist, the dangerous extensions can be bypassed through ap_form_elements SQL Injection.
Published: 2018-05-26T22:00:00.000Z
Updated: 2024-08-05T06:01:49.282Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6410 |
vulnerable | 2026-06-08 05:11:53.708408 |
Details available
An issue was discovered in Appnitro MachForm before 4.2.3. There is a download.php SQL injection via the q parameter.
Published: 2018-05-26T22:00:00.000Z
Updated: 2024-08-05T06:01:49.241Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6409 |
vulnerable | 2026-06-08 05:11:53.707983 |
Details available
An issue was discovered in Appnitro MachForm before 4.2.3. The module in charge of serving stored files gets the path from the database. Modifying the name of the file to serve on the corresponding ap_form table leads to a path traversal vulnerability via the download.php q parameter.
Published: 2018-05-26T22:00:00.000Z
Updated: 2024-08-05T06:01:49.253Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.