Vulnerabilities

TI-2025-27602 CVE-2025-41441 · GHSA-fwqm-5j5w-xq87

Information disclosure through error messages in SYNCK GRAPHICA Mailform Pro CGI

LOW 28

Mailform Pro CGI prior to 4.3.4 generates error messages containing sensitive information, which may allow a remote unauthenticated attacker to obtain coupon codes.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00402 Published 2025-05-26 Fixed in 4.3.4 CWE-209

TI-2023-15891 CVE-2023-32610 · GHSA-rf8j-95h8-vrrr

Regular expression denial of service in SYNCK GRAPHICA Mailform Pro CGI

MEDIUM 41

Mailform Pro CGI 4.3.1.2 and earlier allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01253 Published 2023-06-29 No fix listed CWE-1333

TI-2022-18025 CVE-2022-38400 · GHSA-qq5j-v6jh-6xgc

Information disclosure in SYNCK GRAPHICA Mailform Pro CGI

LOW 30

Mailform Pro CGI 4.3.1 and earlier allow a remote unauthenticated attacker to obtain the user input data by having a use of the product to access a specially crafted URL.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.0156 Published 2022-09-08 No fix listed CWE-200

Vulnerabilities

Filters

Information disclosure through error messages in SYNCK GRAPHICA Mailform Pro CGI

Regular expression denial of service in SYNCK GRAPHICA Mailform Pro CGI

Information disclosure in SYNCK GRAPHICA Mailform Pro CGI