Read the docs

FormosaSoft

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

FormosaSoft records in CISA KEV

No FormosaSoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ee-class 2 records MEDIUM

Records

2 records in Ee-class · all components

TI-2024-09264 CVE-2024-9981 · GHSA-r35g-phmx-hq8m

FormosaSoft ee-class - Local File Inclusion

Priority MEDIUM 41

The ee-class from FormosaSoft does not properly validate a specific page parameter, allowing remote attackers with regular privileges to upload a malicious PHP file first and then exploit this vulnerability to include th…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00786 Published 2024-10-15 Fixed in 20240326.13r14494 CWE-98
TI-2024-09263 CVE-2024-9980 · GHSA-h7h2-345f-m76c

FormosaSoft ee-class - SQL Injection

Priority MEDIUM 41

The ee-class from FormosaSoft does not properly validate a specific page parameter, allowing remote attackers with regular privileges to inject arbitrary SQL commands to read, modify and delete database contents.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00649 Published 2024-10-15 Fixed in 20240326.13r14494 CWE-89
Open these records in search →