Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: ARK-Web co., ltd. Component: A-form Pc Clear all filters
TI-2011-03741 CVE-2011-4274 · GHSA-mqv5-xgm5-g729

Cross-site scripting (XSS) vulnerability in the A-Form PC and PC/Mobile before 3.1…

Priority LOW 22

Cross-site scripting (XSS) vulnerability in the A-Form PC and PC/Mobile before 3.1 plug-ins for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerabili…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01042 Published 2011-11-03 No fix listed CWE-79
TI-2011-02337 CVE-2011-2676 · GHSA-mxcv-w3x2-ccgv

The A-Form and A-Form bamboo before 1.3.6 and 2.x before 2.0.3, and A-Form PC and…

Priority LOW 27

The A-Form and A-Form bamboo before 1.3.6 and 2.x before 2.0.3, and A-Form PC and PC/Mobile before 3.1, plug-ins for Movable Type do not require administrative authentication, which allows remote authenticated users to m…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01263 Published 2011-11-03 No fix listed CWE-287