CVE-2018-6410

4 known exploits for CVE-2018-6410

An issue was discovered in Appnitro MachForm before 4.2.3. There is a download.php SQL injection via the q parameter.

Affected products: Machform
Machform: = 4.2.3

Fix: Available
CVSS 3.0: 9.8 CRITICAL
EPSS: 4.9% (91th percentile)
Weakness: CWE-89
NVD status: Modified
Published: 2018-05-26

CVE-2018-6410 at NVD

Authoritative description, scoring and affected products

MachForm < 4.2.3 - SQL Injection / Path Traversal / Upload Bypass

2018-05-30 Amine TaouirsaEXPLOITDB

MachForm < 4.2.3 - SQL Injection / Path Traversal / Upload Bypass Vulnerabilities

2018-05-30 Amine TaouirsaZDT

MachForm 4.2.3 - SQL Injection Path Traversal Upload Bypass

2018-05-30 Amine TaouirsaEXPLOITPACK

Appnitro MachForm SQL Injection / Traversal / File Upload

2018-05-28 Amine TaouirsaPACKETSTORM