Vulnerabilities

The server in Apple FileMaker before 14.0.4 on OS X allows remote attackers to read PHP source code via unspecified vectors.

Cross-site scripting (XSS) vulnerability in the Instant Web Publishing feature in FileMaker Pro 7 and 8, Server 7 and 8, and Developer 7 allows remote attackers to inject arbitrary web script or HTML via unspecified vect…

FileMaker Pro 5 Web Companion allows remote attackers to send anonymous or forged email.

FileMaker Pro 5 Web Companion allows remote attackers to bypass Field-Level database security restrictions via the XML publishing or email capabilities.

The shopping cart application provided with Filemaker allows remote users to modify sensitive purchase information via hidden form fields.