Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: FormosaSoft Component: Ee-class Clear all filters
TI-2024-09264 CVE-2024-9981 · GHSA-r35g-phmx-hq8m

FormosaSoft ee-class - Local File Inclusion

Priority MEDIUM 41

The ee-class from FormosaSoft does not properly validate a specific page parameter, allowing remote attackers with regular privileges to upload a malicious PHP file first and then exploit this vulnerability to include th…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00786 Published 2024-10-15 Fixed in 20240326.13r14494 CWE-98
TI-2024-09263 CVE-2024-9980 · GHSA-h7h2-345f-m76c

FormosaSoft ee-class - SQL Injection

Priority MEDIUM 41

The ee-class from FormosaSoft does not properly validate a specific page parameter, allowing remote attackers with regular privileges to inject arbitrary SQL commands to read, modify and delete database contents.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00649 Published 2024-10-15 Fixed in 20240326.13r14494 CWE-89