Formtools / Form Tools
11 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2024-6937 | formtools.org Form Tools Import Option List edit.php curl_exec file inclusion | MEDIUM | 5.1 | Jul 21, 2024 |
| CVE-2024-6936 | formtools.org Form Tools Setting code injection | MEDIUM | 5.1 | Jul 21, 2024 |
| CVE-2024-6935 | formtools.org Form Tools User Settings Page cross site scripting | MEDIUM | 5.1 | Jul 21, 2024 |
| CVE-2024-6934 | formtools.org Form Tools cross site scripting | MEDIUM | 5.1 | Jul 21, 2024 |
| CVE-2024-22722 | Server Side Template Injection (SSTI) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary commands via the Group Name field under the add forms… | HIGH | 7.2 | Apr 11, 2024 |
| CVE-2024-22721 | Cross Site Request Forgery (CSRF) vulnerability in Form Tools 3.1.1 allows attackers to manipulate sensitive user data via crafted link. | MEDIUM | 6.3 | Apr 11, 2024 |
| CVE-2024-22719 | SQL Injection vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary SQL commands via the 'keyword' when searching for a client. | HIGH | 8.1 | Apr 11, 2024 |
| CVE-2024-22718 | Cross Site Scripting (XSS) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the client_id parameter in the application URL. | CRITICAL | 9.6 | Apr 11, 2024 |
| CVE-2024-22717 | Cross Site Scripting (XSS) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the First Name field in the application. | MEDIUM | 6.1 | Apr 11, 2024 |
| CVE-2024-22637 | Form Tools v3.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /form_builder/preview.php?form_id=2. | MEDIUM | 6.1 | Jan 25, 2024 |
| CVE-2007-6464 | Multiple PHP remote file inclusion vulnerabilities in Form tools 1.5.0b allow remote attackers to execute arbitrary PHP code via a URL in the g_root_dir parame… | MEDIUM | 6.8 | Dec 20, 2007 |
Showing 1 to 11 of 11 CVEs