H-fj

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

H-fj records in CISA KEV

No H-fj vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mailform Plugin 1 record LOW Mt-phpincgi 1 record LOW

Records

2 records

TI-2015-02599 CVE-2015-2945 · GHSA-jh8x-p66q-m6jw

mt-phpincgi.php in Hajime Fujimoto mt-phpincgi before 2015-05-15 does not properly…

LOW 36

mt-phpincgi.php in Hajime Fujimoto mt-phpincgi before 2015-05-15 does not properly restrict URLs, which allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted request…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01701 Published 2015-05-25 No fix listed CWE-94

TI-2007-06442 CVE-2007-6751 · GHSA-2rv4-2fqg-qr4w

Cross-site scripting (XSS) vulnerability in the MailForm plugin before 1.20 for Movable…

LOW 22

Cross-site scripting (XSS) vulnerability in the MailForm plugin before 1.20 for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01053 Published 2012-01-04 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0