Sploitus

15 exploited vulnerabilities in Machform

Vulnerabilities with publicly known exploits

Vendors
Machform, Appnitro, Appfinix
With known exploits
15
Affected Machform versions
= 4.2.3, 19, 2.0

Vulnerabilities with exploits

Highest CVSS first — 7 of these already have exploit code on Sploitus

CVE-2024-37762
CVSS 9.9 CRITICAL 2024-07-01FIX AVAILABLE
CVE-2018-6411 4 exploits
CVSS 9.8 CRITICAL 2018-05-26FIX AVAILABLE
MachForm < 4.2.3 - SQL Injection / Path Traversal / Upload BypassMachForm < 4.2.3 - SQL Injection / Path Traversal / Upload Bypass Vulnerabilities
CVE-2018-6410 4 exploits
CVSS 9.8 CRITICAL 2018-05-26FIX AVAILABLE
MachForm < 4.2.3 - SQL Injection / Path Traversal / Upload BypassMachForm < 4.2.3 - SQL Injection / Path Traversal / Upload Bypass Vulnerabilities
CVE-2021-20104
CVSS 9.3 HIGH 2021-06-28FIX AVAILABLE
CVE-2024-37765 1 exploit
CVSS 8.8 HIGH 2024-07-01FIX AVAILABLE
Exploit for SQL Injection in Machform
CVE-2021-20102
CVSS 8.8 HIGH 2021-06-29FIX AVAILABLE
CVE-2013-4948 1 exploit
CVSS 7.5 HIGH 2013-07-29FIX AVAILABLE
Machform Form Maker 2 - Multiple Vulnerabilities
CVE-2013-4949 1 exploit
CVSS 6.8 MEDIUM 2013-07-29FIX AVAILABLE
Machform Form Maker 2 - Multiple Vulnerabilities
CVE-2021-20101
CVSS 6.1 MEDIUM 2021-06-29FIX AVAILABLE
CVE-2021-20103
CVSS 6.1 MEDIUM 2021-06-28FIX AVAILABLE
CVE-2021-20105
CVSS 6.1 MEDIUM 2021-06-28FIX AVAILABLE
CVE-2024-37764
CVSS 5.4 MEDIUM 2024-07-01FIX AVAILABLE
CVE-2024-37763
CVSS 5.4 MEDIUM 2024-07-01FIX AVAILABLE
CVE-2018-6409 4 exploits
CVSS 5.3 MEDIUM 2018-05-26FIX AVAILABLE
MachForm < 4.2.3 - SQL Injection / Path Traversal / Upload BypassMachForm < 4.2.3 - SQL Injection / Path Traversal / Upload Bypass Vulnerabilities
CVE-2013-4950 1 exploit
CVSS 4.3 MEDIUM 2013-07-29FIX AVAILABLE
Machform Form Maker 2 - Multiple Vulnerabilities